Cookies Policy

This policy applies to cookies used on our Site. It does not apply to, and we are not responsible for, cookies or tracking technologies used on any other website, platform, or service — including your own store or storefront, any pages controlled by the platform through which we make the Site available (for example, Shopify’s own login and app-authorisation screens), or any third-party website we link to or integrate with. You remain solely responsible for cookie notices, consent, and compliance on your own store, and for any tracking technologies you deploy there.

Cookies are small text files that a website places on your device to store and read information — for example, to keep you signed in, remember your settings, or understand how the site is used.

In this policy, “Cookies” refers collectively to cookies and other similar technologies, including local storage, session storage, pixels, tags, and similar identifiers that store or read information on your device.

Cookies may be:

• First-party — set by us in connection with the Site; or third-party — set by a provider other than us.
• Session — deleted when you close your browser; or persistent — remaining on your device for a defined period or until you delete them.

We use Cookies to operate and secure the Site, to remember the choices you make about Cookies themselves, and — only with your permission — to understand how the Site is used so we can debug and improve it. We do not use advertising Cookies, and we do not use Cookies to build profiles for marketing.

The specific Cookies in use, and their durations, may change from time to time. The current set applicable to you is made available through our cookie banner and your browser tools, which take precedence over the general descriptions in this policy.

3.1 Strictly necessary Cookies — always active

These are required for the Site to function and to keep it secure. They cannot be switched off through our banner, and your consent is not required for them. If you block them, parts of the Site — in particular signing in — will not work.

3.2 Optional Cookies — session recording and website analytics, consent required

With your permission, we use two kinds of optional Cookies. The banner lists the ones used on the part of the Site you are on and offers a single choice covering them, rather than a set of toggles.

• Session recording — a third-party session-recording and product-analytics provider records how the Site is used — the pages you view, the actions you take, and the errors you hit — so we can reproduce problems and improve the Service.
• Website analytics (Google Analytics) — on our public website only (not inside the app, and not on the preview pages we send by email), Google Analytics measures visits: which pages are viewed, how visitors arrived (for example, from a search engine or one of our links), their approximate location, device, and browser, and key actions such as clicking through to our Shopify App Store listing. We have turned off Google signals and ad personalization, and the data is not used for advertising. Google explains how it uses this data in How Google uses information from sites or apps that use our services.

These are set only after you select “Accept optional cookies”. If you select “Only necessary”, or you never answer the banner, no session recording runs and the Google Analytics script is not even loaded. If you withdraw your consent later, we stop Google Analytics on the page and delete its Cookies.

3.3 Analytics that does not use Cookies

We also use a privacy-focused website-analytics provider to count page views and basic events such as which pages are visited and which buttons are clicked. It measures this without setting Cookies and without storing an identifier on your device.

3.4 Preview pages we email to businesses: no Cookies, no third-party scripts

The preview pages we email to businesses (at holidayboost.ai/holiday-preview), and the case study they link to, set no Cookies of any kind and load no third-party scripts: no session recording, no Google Analytics, and not the cookieless analytics described in section 3.3. Our cookie banner does not appear on them, because there is nothing to ask consent for. The only things they load from other websites are images: your product’s photo, from your store’s own Shopify image server, and on the case study our example images, from our file-storage provider.

Without any Cookie, these pages measure how they are used themselves: whether the page was opened, whether the preview image was actually shown on screen and for how long, which buttons were pressed and, on the case study, how far it was read, how long it was open and which of its sources were opened. That is how we know whether a business saw the preview we made for it. What is recorded, and for how long, is set out in our Privacy Policy.

• Strictly necessary Cookies are set without your consent, as they are required to deliver a service you have requested and to keep it secure.
• Optional Cookies (section 3.2) are set only after you give consent through our cookie banner. Until you accept, they are not set. Your consent covers what the banner listed when you gave it: if you accepted before Google Analytics was added to it, our website asks again before using Google Analytics.
• You may withdraw or change your consent at any time using the “Cookie preferences” link in the Site footer, which reopens the banner. Withdrawal takes effect prospectively and does not affect the lawfulness of any processing carried out before withdrawal.
• Your choice is stored in a Cookie for 12 months. If you clear your browser’s cookies, or use a different browser or device, your choice is forgotten and the banner appears again. We may also re-present the banner when our Cookies materially change.
• If you do not accept optional Cookies, you can still use the entire Site — nothing is withheld, and no feature is degraded.

The Site relies on third parties whose Cookies may be set when you use it — currently our session-recording provider, our website-analytics provider (Google), and our hosting, storage, and e-commerce-platform providers. We do not control these third parties, and their use of Cookies is governed by their own policies, not this one. We are not responsible for third-party Cookies, and we may add, remove, or change our providers at any time without notice. You should review the relevant third party’s cookie and privacy policies for details of their practices and your choices. The service providers we use are listed in our Privacy Policy.

Where you consent to optional Cookies, we may collect information such as: pages and screens viewed; actions taken on the Site; the date, time, and duration of your visit; the source that referred you to the Site; and technical information such as device type, browser, operating system, language, and an approximate location derived from your IP address. Google Analytics also stores a randomly generated identifier in its Cookies so that repeat visits can be counted; it does not identify you by name or email, and we never send it personal details such as your email address or your store’s domain. Our cookieless analytics (section 3.3) collects a narrower set of the same kind of information.

We use this information to operate, secure, measure, troubleshoot, and improve the Site, and for the other purposes described in our Privacy Policy. We do not sell it, and we do not share it for cross-context behavioural advertising.

You can manage Cookies in the following ways:

• Our cookie settings — use the banner, or the “Cookie preferences” link in the footer, to accept or reject optional Cookies at any time.
• Your browser — most browsers let you view, block, or delete cookies and clear local storage through their settings or help menus. Blocking all cookies will affect how the Site works.
• Third-party controls — for third-party Cookies, use the controls and opt-out mechanisms offered by the relevant provider.

Managing Cookies is your responsibility. Disabling or deleting Cookies, including strictly necessary Cookies, may cause parts of the Site to malfunction or become unavailable, and we are not responsible for any resulting loss of functionality, access, or data.

Session Cookies expire when you close your browser. Our own persistent Cookies last no longer than the periods set out in section 3.1 — a maximum of 12 months — or until you delete them. The duration of third-party Cookies is determined by the provider that sets them. Google Analytics keeps the visit data it collects for up to 14 months. Other information associated with Cookies is retained in accordance with our Privacy Policy.

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, we do not currently respond to DNT signals. Where we are legally required to recognise an opt-out preference signal (such as Global Privacy Control), we will honour it to the extent, and in the manner, required by applicable law. On our website, a Global Privacy Control signal keeps Google Analytics off unless you accept it on our cookie banner.

The Site is intended for businesses and for users aged 18 or over. We do not knowingly use Cookies to collect information from children.

We may update this Cookies Policy at any time by posting the revised version with a new “Last updated” date. Changes take effect when posted. Your continued use of the Site after we post a change constitutes your acceptance of the revised policy. Please review this policy periodically.

Questions about this Cookies Policy: hey@holidayboost.ai.