Cookie Policy
1. Purpose and scope
This policy explains which tracking technologies (cookies, local storage and similar technologies) the magmei.com website and the associated Shopify checkout may use, for what purposes, and how you can accept, refuse or change your choices. It supplements, and does not replace, the Privacy Policy and the Legal Notice.
This policy describes the configuration actually in place as of the update date shown above. It will be updated if new technologies are activated.
2. What is a cookie or similar technology
A cookie is a small text file placed on your device when you visit a website. Local storage and similar technical identifiers serve comparable functions. These technologies can be used, among other things, to remember a state (such as language or cart contents), recognise your browser from one page to the next, or measure use of a service.
3. Strictly necessary technologies
These technologies are essential to the functioning of the site and do not require your consent. They include:
- remembering the display language (English or French) selected on the site;
- recording your cookie-preference choice, so that you are not asked again on every visit;
- cookies and identifiers managed by Shopify for the cart, checkout, session security, fraud prevention and payment processing;
- when you explicitly request to be notified of a product’s availability (the "Notify me when back in stock" feature), sending our provider STOQ the information strictly necessary for that alert (see section 9 below) — this transmission results from a voluntary action on your part and is not triggered by a tracking cookie.
Blocking these technologies in your browser may prevent the cart, login or payment functions from working correctly.
4. Preferences
This category would, if activated, cover technologies that remember comfort choices beyond language (for example, a personalised display setting). As of the update date of this policy, no technology in this category, distinct from the strictly necessary elements already described in section 3, is active on the site. If such a technology were activated, it would be subject to your prior consent, and this policy would be updated accordingly.
5. Analytics
Subject to your prior consent to the Analytics category, Magmei uses Google Analytics 4 through Google Tag Manager to measure visits and understand how the site is used. The events currently configured may include page views, product views, additions to and removals from the cart, cart views and the beginning of checkout.
Depending on the event, the information sent may include an online client identifier generated by Google, consent status, page URL and title, language, referrer, browser or device information, product identifiers and names, variants, quantities, currency and value. Magmei’s implementation does not send names, email addresses, telephone numbers or other customer contact details to Google Analytics, and neither User-ID nor Enhanced Conversions is configured.
Google Analytics may create first-party cookies such as `_ga` and a property-specific `_ga_*` cookie after Analytics consent has been granted. Google documents their standard maximum duration as two years, although the effective duration may be shorter because of browser settings or later withdrawal of consent. Magmei’s consent mechanism removes the relevant analytics cookies when Analytics consent is withdrawn.
Independently of this cookie duration, the Google Analytics 4 property used by Magmei applies a Google-side retention setting, currently configured to 14 months, for event-level and user-level data held by Google. This server-side retention, governed by the GA4 property’s own configuration, is distinct from the cookie duration described above.
6. Marketing and advertising
Subject to your prior consent to the Marketing category, Magmei uses a Google Ads base tag through Google Tag Manager. Once that consent is granted, this tag sends page-view and remarketing events, used for advertising measurement and audience-related advertising functionality.
The information processed may include online identifiers, consent status, page and referrer information and standard browser or device information. Google Ads may create cookies such as `_gcl_au` after Marketing consent has been granted. Google documents a standard maximum duration of 90 days for this identifier. Other `_gcl_*` identifiers may be created only where relevant, for example following an advertising click.
No specific Google Ads conversion action, Enhanced Conversions implementation or transmission of customer names, email addresses or telephone numbers to Google Ads is currently configured. The mechanism must not be described as recording completed purchases or other Google Ads conversions until such a conversion action is separately configured and disclosed.
Google Tag Manager is the tag-management mechanism used to load the authorized Google tags after the relevant consent. It does not create a separate Magmei tracking identifier of its own.
7. Retention periods by technology
The table below summarises, concisely, the main technologies used by the site, their provider, purpose and their observed duration or the duration documented by the provider. It supplements, and does not replace, sections 3 to 6 above.
| Technology | Provider, purpose and duration |
|---|---|
| magmei_cookie_consent | Local storage, managed by Magmei. Records your cookie-category choices. Strictly necessary for recording your choice. Retained for six months from this update, after which your choice is requested again. |
| NEXT_LOCALE | Language-preference cookie, strictly necessary. A session cookie: no fixed duration is set; it expires when the browser session ends (duration verified directly from the site’s own response). |
| _tracking_consent | Cookie managed by Shopify, recording your privacy choices on Shopify-managed surfaces. Strictly necessary for managing that choice. Observed duration of one year. |
| _ga and _ga_* | Google Analytics cookies, Analytics category. Set only after your consent to this category. Google documents a standard maximum duration of up to two years. |
| _gcl_au | Google Ads cookie, Marketing category. Set only after your consent to this category. Google documents a standard maximum duration of up to 90 days. |
| Other _gcl_* identifiers (_gcl_aw, _gcl_dc, _gcl_gb) | Conditional Google Ads identifiers, Marketing category. Not always active: created only where relevant, for example following an advertising click, and only after your consent to this category. |
| Google Tag Manager (GTM) | Tag-management mechanism used to load the Google technologies above after the relevant consent. Not itself a cookie. |
| STOQ | A voluntary customer submission of a back-in-stock notification request (see section 10 below). Not a passive cookie category and not triggered by any tracking cookie. |
8. Shopify Customer Privacy
The site uses Shopify’s Customer Privacy API as the system of record for recording and applying your consent choices on Shopify-managed surfaces (checkout, and, where applicable, any advertising pixels or audiences activated directly from the Shopify admin). The choice you express through the site’s banner or Cookie Preferences tool is communicated to Shopify so that it applies consistently between the site and checkout at checkout.magmei.com. The exact behaviour (whether a banner is shown, and which categories are offered) may vary depending on the region from which you access the site and on the privacy configuration set by Magmei in its Shopify admin.
9. Shopify Network Intelligence
Magmei uses Shopify’s services for the site’s infrastructure, cart, checkout and security; in that capacity, Shopify processes customer data as well as technical and device/activity data necessary to provide these services.
Magmei has enabled Shopify Network Intelligence. Per Shopify’s own description, when this feature is enabled, Shopify may use customer and visitor data together with information from interactions with Shopify and other merchants to provide, protect, personalise, measure and improve Shopify’s services, including through "Enhanced Services" that may contribute to analytics, personalisation, fraud prevention, marketing measurement and certain advertising functionality. For this network activity based on cookies or device identifiers, Shopify states that customer consent remains required in the European Economic Area, the United Kingdom and Switzerland and applies through the consent mechanisms described in this policy; other aspects of this processing, in particular those related to security and fraud prevention, may rely on a different legal basis used by Shopify rather than consent. For this cross-merchant network activity, Shopify states that it may act as an independent controller, distinct from its role as Magmei’s processor for the direct store functions described in the preceding paragraph.
This information may be shared with Shopify and its relevant subprocessors or recipients, including in other countries. For these transfers, Shopify states that it relies, as applicable, on the European Commission’s Standard Contractual Clauses (2021 version), the UK’s International Data Transfer Addendum, the European Commission’s adequacy decision applicable to Canada, or its own Binding Corporate Rules for transfers from the European Economic Area and Switzerland.
We limit ourselves to Shopify’s own description of this feature and do not add any technical detail, retention period, data field or processing country that is not confirmed by Shopify itself. Enabling this feature does not change your privacy rights or choices: applicable consent, objection, opt-out and deletion choices continue to be respected through Shopify’s own privacy mechanisms, the Shopify Customer Privacy API and Shopify’s privacy portal, as well as through regional settings and the choices you express through the site’s Cookie Preferences tool. Shopify’s automated privacy settings being enabled does not, by itself, guarantee the legal compliance of all related processing.
For more detail, or to exercise your rights directly with Shopify, see Shopify’s Privacy Policy (https://www.shopify.com/legal/privacy/consumers) and its privacy portal (https://privacy.shopify.com/en).
10. STOQ — back-in-stock notifications
When you explicitly request to be notified of a product’s availability, the site sends our provider STOQ (Artos Software) the information strictly necessary for that alert: your email address, your selected language, and the relevant product or variant identifier. This request does not subscribe you to marketing: the technical marketing-consent flag sent to STOQ is fixed to “false”. This transmission occurs only following your explicit request and is not triggered by any tracking cookie.
Separately, the Shopify admin also lists a "customer events" pixel application, also provided by STOQ, which Shopify classifies as not requiring prior consent, always active, not treated as a sale of data, and able to continue operating even after a data-sharing opt-out. We have no confirmation that this Shopify-visible pixel and the server-side integration described in the previous paragraph constitute one and the same processing activity; we can therefore neither confirm nor rule this out. We do not claim that STOQ collects no personal data, and we make no representation about any retention period, subprocessor or data-sale practice beyond what is stated above, as we do not have verified confirmation from STOQ on these points.
11. Opt-out of sale or sharing of data (United States)
In regions where applicable law (for example, certain US state privacy laws) provides a separate right to opt out of the "sale" or "sharing" of data for advertising purposes, and where Shopify detects that this mechanism applies to your situation, a dedicated option is presented to you separately through Shopify’s privacy system. This mechanism is distinct from the European-style opt-in consent to non-essential cookies described in sections 4 to 6 above: it must not be shown to visitors to whom it does not apply, and its absence for you does not mean a waiver of your European consent rights.
12. How to change your choices
You may review, change or withdraw your consent to non-essential categories at any time using the "Cookie Preferences" tool, permanently accessible via the corresponding link in the site footer. Magmei’s own consent choice is retained for six months and is not renewed merely because you revisit the site. After that period, or after a material change requiring a new consent version, you will be asked to choose again. Withdrawing consent does not retroactively affect processing lawfully carried out before withdrawal.
13. Updates to this policy
We may update this policy to reflect the activation, modification or deactivation of a technology described above. The date at the top of this document will then be changed. Activating a new non-essential technology will be accompanied by appropriate notice and, where required, a fresh request for consent.
14. Contact
For any question about this policy, write to contact@magmei.com.
Data controller: Meiqi JIA, individual entrepreneur (EI), trading under the business name HARMONIE SOLUTIONS, 12 Avenue de Picardie 26130 Saint-Paul-Trois-Châteaux.