Cookie statement

• Moxy's Muse VOF
• Registered office: P.C. Staalweg 16, 3721 TJ Bilthoven, The Netherlands
• Correspondence: Postbus 12870, 1100 AW Amsterdam, The Netherlands
• KVK: 95968946
• VAT: NL867404395B01
• Email: info@moxysmuse.com

Cookies are small text files stored on your device when you visit a website.

They allow the website to recognize your device and remember certain information about your visit.

We also use similar technologies such as pixels, tags, and local and session storage in your browser.

Together, these are referred to as cookies in this policy. The table "All cookies at a glance" lists every one of them.

The cookie banner has two choices: analytics and marketing. Reject and Accept weigh the same, and without a choice nothing in either category runs.

Analytics: Google Analytics, Shopify statistics, Umami heatmaps and session recordings.

Marketing: Meta (Facebook, Instagram), Snapchat, Pinterest, Google Ads, Klaviyo.

Strictly necessary cookies, the low-impact analytical cookies and our statistics without cookies run without a choice; they are described below.

• mm_cookie_consent

  Strictly necessary

  Remembers your cookie choice, so the banner does not ask again on every page.

  Moxy's Muse · 180 days

• _tracking_consent

  Strictly necessary

  Shopify’s copy of your cookie choice, so the checkout follows the same choice.

  Shopify · 1 year (set by Shopify)

• shopify_cart_id

  Strictly necessary

  Keeps the pieces in your bag.

  Moxy's Muse (Shopify cart) · 30 days

• mm_discount

  Strictly necessary

  Carries the discount code of a link you clicked to the checkout.

  Moxy's Muse · 30 days

• mm_review_invite, mm_review_form

  Strictly necessary

  Only when you open the personal link in a review e-mail. mm_review_invite keeps the key from that link for the review form, readable by our own server only, so the key does not stay in the web address where scripts on the page could read it. mm_review_form only says which page the link opened.

  Moxy's Muse · 1 hour; the key is removed as soon as your review is in

• shopify_customer_* (sign-in)

  Strictly necessary

  Keeps you signed in to your account. Only when you sign in.

  Moxy's Muse (Shopify customer accounts) · Up to 1 year; the sign-in steps themselves 10 minutes

• mm_contact_email

  Strictly necessary

  Remembers the e-mail address you gave us (newsletter, back-in-stock alert, order lookup or sign-in), so your bag, wishlist and these forms know it is you. With your marketing consent it is also sent to Snapchat as a SHA-256 hash, see below.

  Moxy's Muse · 30 days

• Checkout cookies on checkout.moxysmuse.com

  Strictly necessary

  Run the checkout and the payment and help prevent fraud.

  Shopify · Set by Shopify

• Local storage: mm_wishlist_v1, mm_recently_viewed_products, mm_recent_searches, mm-newsletter-*, mm-pageviews

  Strictly necessary

  Stored in your browser only: your wishlist, the pieces you viewed and searched for recently, and whether you already saw the newsletter pop-up.

  Moxy's Muse · Until you clear your browser data

• mm_exp

  Analytical, low impact (no consent needed)

  Only while we test a page design: which version you see, so it stays the same. A random number, no personal data, not shared with other companies.

  Moxy's Muse · 180 days

• mm_attribution

  Analytical, low impact (no consent needed)

  The campaign tags (utm_…) of the link you arrived through, so an order is credited to the right campaign. Ad click ids (such as gclid, fbclid or ScCid) are only added with your marketing consent.

  Moxy's Muse (passed to the Shopify checkout) · 30 days

• _shopify_y, _shopify_s

  Analytics (only with your consent)

  A visitor id and a visit id for Shopify’s statistics, so an order shows how the visit went (landing page, source, campaign).

  Shopify · 1 year / 30 minutes

• _ga, _ga_<id>

  Analytics (only with your consent)

  Tell visits and visitors apart for our Google Analytics statistics.

  Google (Google Analytics 4) · Up to 2 years (set by Google); the data in Google Analytics is kept 14 months

• _fbp, _fbc

  Marketing (only with your consent)

  Recognise your browser and the ad you clicked, to measure and personalise ads on Facebook and Instagram.

  Meta (Facebook, Instagram) · 90 days (set by Meta)

• mm_meta_match

  Marketing (only with your consent)

  After a newsletter or waitlist signup, or when you are signed in: SHA-256 hashes of your e-mail address, phone number and customer number, never the address or number itself.

  Moxy's Muse (sent to Meta) · 180 days, removed when you withdraw marketing consent

• _scid (and Snap’s other cookies)

  Marketing (only with your consent)

  Recognise your browser, to measure ads on Snapchat.

  Snap (Snapchat) · Set by Snap

• Session storage: mm_snap_click_id

  Marketing (only with your consent)

  The Snapchat click id (ScCid) of the link you arrived through, for the open tab only.

  Moxy's Muse (sent to Snap) · Until you close the tab

• _pin_unauth; _epik and _derived_epik after a Pinterest ad click; _pinterest_ct_ua on Pinterest’s own domain

  Marketing (only with your consent)

  Recognise your browser and the Pinterest ad you clicked, to measure ads on Pinterest.

  Pinterest · Up to 1 year (set by Pinterest)

• Google’s ad cookies in the checkout (such as _gcl_au)

  Marketing (only with your consent)

  Measure which Google ads lead to a purchase.

  Google (Google Ads, through the Google & YouTube app in the Shopify checkout) · Set by Google

• __kla_id

  Marketing (only with your consent)

  Links your visit to your newsletter profile, so we can e-mail you about pieces you viewed or left in your bag. Only if you also signed up for our e-mails.

  Klaviyo · Set by Klaviyo

• __kla_off

  Strictly necessary

  Tells Klaviyo not to follow your visit as long as you have not allowed marketing cookies. Removed when you allow them.

  Moxy's Muse (read by Klaviyo's script) · 1 year

• Local storage: umami.disabled

  Strictly necessary

  Only if you switch our statistics without cookies off: remembers that choice, so Umami does not count your visits in this browser.

  Moxy's Muse (read by our statistics, Umami) · Until you switch the statistics back on or clear your browser data

These cookies are essential for the operation of our website and the checkout, and do not need your consent.

These cookies cannot be disabled.

• Your cookie choice (mm_cookie_consent, and Shopify’s copy _tracking_consent)
• Your bag (shopify_cart_id) and a discount code from a link (mm_discount)
• Writing a review through the personal link in your review e-mail (mm_review_invite and mm_review_form, for one hour)
• Signing in to your account (shopify_customer_*)
• The e-mail address you gave us for the newsletter, a back-in-stock alert, an order lookup or signing in (mm_contact_email)
• Secure checkout, payment processing and fraud prevention (Shopify, in the checkout)
• Your wishlist, recently viewed pieces and recent searches, kept in your browser only
• A note for Klaviyo not to follow your visit while you have not allowed marketing cookies (__kla_off)
• Your choice to switch off our statistics without cookies, only if you make it (umami.disabled, in your browser’s local storage)

These two cookies of our own contain no personal data that identifies you, are not used to follow you and have little impact on your privacy. As Dutch law allows for such analytical cookies, we place them without asking.

• mm_exp: only while we test a page design, which version you see (a random number), so it stays the same
• mm_attribution: the campaign tags (utm_…) of the link you arrived through, so an order is credited to the right campaign. Ad click ids are only added with your marketing consent (see below).

We measure the use of our website with Umami, which we run ourselves on our own server in the Netherlands. It places no cookies, stores nothing on your device and does not follow you across other websites.

It is pseudonymous, not anonymous: our server calculates a visitor code from your IP address, browser details, the current calendar month and a secret key, so your visits from the same browser and connection within one month are linked, and a new code starts every month. The IP address itself is not stored. Web addresses are cleaned of search terms, e-mail addresses and tokens before they are stored. The statistics are kept for two years.

We also measure how fast our pages load on your device (load times). Our host Vercel measures load times too (Vercel Speed Insights), without cookies.

Cloudflare handles the connection to our statistics server on our behalf.

Legal basis: Legitimate interest.

You can switch these statistics off for your browser with the switch "Statistics without cookies (Umami)" at the top of this page; heatmaps and recordings then stay off too. The switch keeps your choice in your browser’s local storage (umami.disabled), not in a cookie, and you can switch the statistics back on there. It does not cover the steps of the Shopify checkout, which are counted separately.

• Pages visited and their titles
• Time spent on a page and scroll depth
• Traffic sources (the referring website and campaign tags)
• Product views, bag and checkout steps, and the order value
• Load times of the pages
• Device type, browser, operating system, screen size and language
• Approximate location (country, region and city) derived from the IP address

Go to the switch

These are only placed after your consent for analytics.

Heatmaps and session recordings (Umami) also only start after your consent. In recordings all text and everything you type is masked, and the account area, our order, contact and newsletter forms and every field for a name, e-mail address, phone number or address are left out. Recordings do contain the web addresses of the pages you view and of the links on them, including search words. Recordings and heatmap data are deleted after 30 days.

Legal basis: Consent.

• Google Analytics 4 (_ga, _ga_<id>): pages and products viewed, bag and checkout steps, cleaned searches and, from our server, your purchase. Data kept 14 months.
• Shopify statistics (_shopify_y, _shopify_s): your page views, so your order shows how the visit went.
• Heatmaps and session recordings (Umami, on our own server)

These cookies allow us to show personalized advertisements, retarget visitors, measure ad performance, and track conversion events.

These cookies are only activated with your explicit consent. Meta, Snapchat, Pinterest and Google also use the data for their own purposes, under their own privacy policies; Klaviyo works on our behalf.

Legal basis: Consent.

• Meta Pixel (Facebook & Instagram): Meta's own cookies (_fbp, _fbc) and the events you trigger (page view, product view, add to cart, wishlist, newsletter signup, checkout start, payment step, purchase, and that you searched but never the words). With your marketing consent our own server also sends Meta a copy of these events (Conversions API) with the same details, your IP address and browser
• mm_meta_match (our own cookie): after a newsletter or waitlist signup, or when you are signed in to your account, SHA-256 hashes of your e-mail address, phone number and customer number; never the address or number itself. Kept for 180 days and sent to Meta together with your visit events so Meta can match them to your Meta account; removed when you withdraw marketing consent
• Snap Pixel (Snapchat): Snap’s cookie (_scid) and your page views, product views, add to bag and checkout start, plus the Snapchat click id of your landing page (session storage). Our server sends Snap a copy with your IP address and browser, the e-mail address you gave us as a hash, and your purchase with your e-mail address and phone number as hashes
• Pinterest tag: Pinterest’s cookies (such as _pin_unauth, _epik and _derived_epik) and your page views, collection pages viewed and add to bag (product, price and quantity); nothing on a page with search results. Pinterest’s app in the Shopify checkout measures purchases from Pinterest ads
• Google Ads: Google’s app in the Shopify checkout measures purchases from Google ads (Google’s ad cookies, such as _gcl_au, with your e-mail address as a hash)
• Ad click ids (gclid, gbraid, wbraid, fbclid, ScCid and similar) in mm_attribution and on the way to the checkout
• Klaviyo (__kla_id): links your visit to your newsletter profile, for e-mails about pieces you viewed or left in your bag

When you first visit our website, you will be presented with a cookie banner allowing you to accept all cookies, reject non-essential cookies, or customize your preferences.

Non-essential cookies (analytics and marketing) will only be activated after your explicit consent. Our statistics without cookies (see above) place nothing on your device and run without this step; you can switch them off for your browser with the switch at the top of this page.

You may withdraw or modify your consent at any time through Cookie settings at the bottom of every page. When we add a party that places cookies, we ask for your choice again.

You can manage or delete cookies through your browser settings.

Disabling certain cookies may affect the functionality and performance of our website.

How long each cookie stays on your device is in the table "All cookies at a glance". Session storage is cleared when you close the tab.

Session recordings and heatmap data (Umami) are kept for 30 days, the statistics without cookies for two years, Google Analytics data for 14 months.

The hashed details for Meta (mm_meta_match) are kept for 180 days, like your cookie choice itself, and removed earlier when you withdraw marketing consent.

Some third-party service providers may process data outside the European Economic Area (EEA).

For companies certified under the EU-US Data Privacy Framework (such as Google, Meta, Klaviyo, Vercel, Cloudflare and Snap) we rely on that framework; otherwise on Standard Contractual Clauses (SCCs).

We may update this Cookie Policy to reflect changes in legal requirements or operational practices.

The latest version will always be available on this page, with its date at the top.

If you have questions about this Cookie Policy, please contact help@moxysmuse.com.

More information about how we handle personal data can be found in our privacy policy.

Questions about cookies or privacy? Reach us via contact.