Cookies

G A O P É

COOKIE POLICY

Information on cookies and trackers used on the Platform

Version 1.0 — July 2026

1. What is a cookie?

A cookie is a small text file placed on your device (computer, tablet, smartphone) when you visit the Platform. It allows your browser to be recognized during subsequent visits and to remember certain information about you (language, preferences, shopping cart content, etc.)

This Policy also applies to other tracking technologies similar to cookies (pixels, beacons, identifiers, local storage or equivalent technologies), when used on the Platform.

Cookies do not contain viruses and cannot harm your device. Some cookies are strictly necessary for the proper functioning of the Platform; others require your prior consent.

2. The cookies we use

The Platform uses three categories of cookies:

2.1 Strictly necessary cookies

These cookies are essential for the functioning of the Platform: session management, shopping cart content, payment security. They cannot be deactivated without affecting the functioning of the site. In accordance with regulations, they do not require your consent.

2.2 Analytical cookies

These cookies allow us to measure the Platform's audience and analyze browsing behavior (pages visited, session duration, bounce rate) in order to improve the user experience. They are placed only with your consent.

2.3 Marketing cookies

These cookies are used to personalize marketing communications and measure the effectiveness of our campaigns (emails, newsletters). They are placed by our marketing providers (Klaviyo) only with your consent.

3. Detailed cookie table

Cookie Name	Issuer	Purpose	Duration	Consent required
_shopify_session	Shopify	User session, cart, authentication	Session	No
_shopify_y	Shopify	Unique visitor ID (Shopify internal statistics)	1 year	Yes
cart	Shopify	Cart content	2 weeks	No
secure_customer_sig	Shopify	Customer account authentication	20 years	No
_ab	Shopify	Internal A/B testing (site functionality)	2 years	Yes
_ga	Google Analytics	Visitor ID — audience measurement	13 months	Yes
_ga_XXXXXXXX	Google Analytics	Analytics session persistence	13 months	Yes
klaviyo	Klaviyo	Visitor identification for marketing emails	2 years	Yes
__kla_id	Klaviyo	Email interaction tracking (opens, clicks)	2 years	Yes
__stripe_mid	Stripe	Payment fraud prevention	1 year	No
__stripe_sid	Stripe	Fraud prevention (session)	30 min	No

* The _ga_XXXXXXXX ID contains the Google Analytics property ID specific to GAOPÉ, configured at the time of publication.

4. Managing your preferences

4.1 Consent banner

When you first visit the Platform, a banner allows you to accept or refuse non-essential cookies in a granular manner (analytical and/or marketing). You can change your choices at any time via the "Cookie Management" link accessible at the bottom of each page.

4.2 Browser settings

You can also configure your browser to accept or refuse cookies. Most browsers offer this option in their settings. Please note: deactivating certain cookies may affect the functioning of the Platform (shopping cart, account login).

Links to the settings of major browsers:

• Google Chrome: chrome://settings/cookies
• Mozilla Firefox: about:preferences#privacy
• Safari: Preferences > Privacy
• Microsoft Edge: edge://settings/privacy

4.3 Opting out of Google Analytics tracking

You can opt out of data collection by Google Analytics by installing the browser add-on available at: https://tools.google.com/dlpage/gaoptout

5. Retention periods

The retention periods for each cookie are indicated in the table in section 3. In accordance with CNIL recommendations, analytical cookies have a maximum duration of 13 months. Beyond that, your consent is requested again.

6. Third-party recipients

Data collected via third-party cookies is transmitted to the following service providers, who have their own privacy policies:

• Google LLC (Analytics) — https://policies.google.com/privacy
• Klaviyo Inc. (Marketing) — https://www.klaviyo.com/legal/privacy-notice
• Stripe Inc. (Payment) — https://stripe.com/fr/privacy
• Shopify Inc. (Platform) — https://www.shopify.com/legal/privacy

Some of our service providers may be located outside the European Union. In such cases, transfers are governed in accordance with the GDPR, notably by means of an adequacy decision or standard contractual clauses adopted by the European Commission.

7. Policy updates

GAOPÉ reserves the right to modify this Cookie Policy at any time, notably to integrate new tools or comply with regulatory changes. The applicable version is the one published on the Platform on the date of your visit.

For any questions regarding cookies or the management of your personal data, please contact us at: contact@gaope.fr

GAOPÉ — 141 rue Saint-Denis — 75002 Paris — contact@gaope.fr — July 2026