Cookie policy
Cookie policy
Last updated 2026-06-11. This page tells you exactly which cookies and tracking technologies kojo.life uses, what they do, who sets them, how long they last, and how to control them. It is published under the Privacy and Electronic Communications Regulations 2003 (PECR), the UK GDPR, and the Information Commissioner’s cookie guidance (July 2025).
1. What cookies are
Cookies are small text files stored on your device when you visit a website. They allow the website to remember your actions and preferences (login, language, cart contents, etc.) and let analytics tools understand how the site is used. Some cookies are essential to the site working; others are not.
2. Your control
Under PECR, you have the right to give or withhold consent for non-essential cookies. We use the Shopify Customer Privacy cookie banner to ask for consent on your first visit. You can change your mind at any time:
- Click the “Cookie preferences” link in the footer (when available)
- Clear cookies in your browser settings — we will ask again on your next visit
- Use your browser’s privacy controls
Reject and Accept are equally prominent. You do not lose access to any part of the site by rejecting.
3. Strictly necessary cookies (no consent required)
These cookies are essential to the site working. PECR exempts them from the consent requirement because they are needed to deliver the service you have asked for.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_shopify_essential |
Shopify | Stores secure-checkout session token | 1 year |
cart_currency |
Shopify | Remembers your selected currency | 2 weeks |
localization |
Shopify | Remembers your region (e.g. GB) | 1 year |
cart / cart_sig
|
Shopify | Holds the contents of your shopping cart | Session / 2 weeks |
4. Analytics cookies (consent required)
These cookies help us understand how visitors use the site. We do not set them until you give consent via the banner. If you reject, none of these are placed on your device.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
_y, _s
|
Shopify (Trekkie) | Unique-visitor and session analytics for the Shopify platform | 1 year / 30 mins |
_shopify_y, _shopify_s
|
Shopify Analytics | Aggregate visitor counts and session duration | 1 year / 30 mins |
_ga, _gid, _ga_*
|
Google Analytics 4 (Google LLC, US) | Unique-visitor analytics, traffic-source attribution, conversion tracking | 2 years / 24 hours |
_hjSessionUser_*, _hjSession_*
|
Hotjar (Contentsquare SAS, Malta + US) | Session replay and heatmap analytics for site improvement | 1 year / 30 mins |
5. Functional cookies (consent required for non-essential parts)
Used by integrated services to deliver specific features.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| Recharge session cookies | Recharge Payments, Inc. (US) | Subscription management portal session | Session |
| Judge.me cookies | Judge.me (HK / SG) | Stores review-widget state, prevents duplicate review submissions | 1 year |
6. Marketing cookies (consent required)
We currently use Klaviyo to send marketing emails when you sign up to our waitlist or marketing list. Klaviyo also sets cookies that link your browsing behaviour on kojo.life to your marketing profile. These are placed only after you give explicit marketing consent.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
__kla_id |
Klaviyo, Inc. (US) | Links site visits to your email-marketing profile | 2 years |
7. Third-party domains and where data flows
Visiting kojo.life loads resources from several third-party domains. Even when no cookie is set, your IP address is shared with these third parties because that is how the internet works. For the technologies above we obtain consent before loading the script.
-
monorail-edge.shopifysvc.com— Shopify analytics ingest (US/Canada) -
cdn.fontshare.com— Web fonts (India) -
fonts.googleapis.com,fonts.gstatic.com— Google Fonts (US) -
cdn.judge.me,api.judge.me— Reviews widget (HK / SG) -
static.rechargecdn.com— Recharge subscription scripts (US) -
videos.ashy.ink(Cloudflare R2) — Niwa breathing-app videos (US) -
cdnjs.cloudflare.com— Animation library, GSAP (US) -
a.klaviyo.com— Klaviyo waitlist signup (US) -
googletagmanager.com,google-analytics.com— GA4 (US) -
script.hotjar.com,vc.hotjar.io— Hotjar (Malta + US)
For UK→US transfers we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, plus Transfer Impact Assessments where appropriate. See our privacy policy for the full data-protection framework.
8. Browser-level controls
You can also block or delete cookies via your browser settings. Most browsers let you:
- Block all cookies, or only third-party cookies
- Delete cookies on exit
- Send a Do Not Track signal
If you block all cookies, parts of the site (cart, checkout) will not work. Strictly necessary cookies cannot meaningfully be blocked without breaking the site.
9. Changes to this policy
We may update this page when we add or remove tracking technologies, or when guidance from the Information Commissioner changes. Material changes are flagged in our cookie banner so you can re-consent.
10. Contact
Questions or complaints about cookies and tracking: hello@kojo.life. Your right to complain to the Information Commissioner is set out in our privacy policy § 8.