Cookies
Effective date: September 21, 2026
Last updated: September 30, 2026
This section covers cookies and similar technologies Company uses on BulkiApps.com, in the app and through its storefront features. Cookies store small text files in a browser; similar technologies include local and session storage, pixels, SDKs and service workers. A Merchant or another provider may separately use technologies described in its own notice.
Categories. Strictly necessary technologies support authentication, security, consent records and core functions a user requests; we treat a technology as strictly necessary only when a function you request needs it, and optional-cookie controls do not disable those functions. Functional technologies remember optional preferences and settings, subject to required choices. Analytics and performance technologies measure usage, errors and reliability, with prior consent where required. Advertising technologies on BulkiApps.com let advertising partners measure and target Company's own ads; they are not used in the app or in storefront features, and Merchant-controlled data is never used for advertising.
Technology inventory
The inventory identifies each technology's context, data, purpose, duration, recipient and available choice.
| Context and provider | Technology and data | Purpose and category | Duration | Recipient and privacy link | Choice or exemption |
|---|---|---|---|---|---|
| BulkiApps.com (Company) | Browser local storage holding your cookie-banner choice | Remember your cookie-banner choice (strictly necessary) | Choice record: no automatic expiry, until you clear site data or use Manage cookies. | The choice stays in your browser. | The choice record is needed to honor your choice. |
| BulkiApps.com: Google Analytics (Google LLC) | Cookies holding a random visitor ID and session state; pages viewed, events, referrer, device and browser details and approximate location from your IP address | Measure website visits and performance (analytics) | 2 years | Google; Google Privacy Policy | Optional. For visitors in the United States it loads by default; turn it off at any time with Manage cookies in the website footer. Everywhere else it loads only if you accept optional cookies in the cookie banner. |
| BulkiApps.com: Google Ads tags (Google LLC) | Cookies holding advertising click identifiers, set when you arrive from or click a Google ad; Google may also set its own cookies on its advertising domains | Measure and target Company's ads (advertising) | 90 days | Google; Google Privacy Policy | Optional. For visitors in the United States it loads by default; turn it off at any time with Manage cookies in the website footer. Everywhere else it loads only if you accept optional cookies in the cookie banner. Opting out of sale or sharing (the Do Not Sell or Share My Personal Information link), or sending Global Privacy Control, also turns it off. |
| BulkiApps.com: Meta Pixel (Meta Platforms, Inc.) | Cookies holding a browser identifier and, if you arrive from a Meta ad, a click identifier; pages viewed and events on BulkiApps.com, with your IP address and browser details | Measure and target Company's ads on Facebook and Instagram (advertising) | 90 days | Meta; Meta Privacy Policy | Optional. For visitors in the United States it loads by default; turn it off at any time with Manage cookies in the website footer. Everywhere else it loads only if you accept optional cookies in the cookie banner. Opting out of sale or sharing (the Do Not Sell or Share My Personal Information link), or sending Global Privacy Control, also turns it off. |
| BulkiApps.com: Microsoft Clarity (Microsoft Corporation) | First-party cookies holding a visitor ID, preferences and a session identifier, and Microsoft’s own cookies; heatmaps and session recordings of mouse movements, clicks, scrolling and pages viewed, with input fields masked | Understand and improve how visitors use the website (analytics); Microsoft also uses the data for its own purposes, including Microsoft Advertising | Set by Microsoft; see its Clarity cookie list | Microsoft; Microsoft Privacy Statement | Optional. For visitors in the United States it loads by default; turn it off at any time with Manage cookies in the website footer. Everywhere else it loads only if you accept optional cookies in the cookie banner. Opting out of sale or sharing (the Do Not Sell or Share My Personal Information link), or sending Global Privacy Control, also turns it off. |
| BulkiApps.com: PostHog (PostHog, Inc.) | A cookie and matching local storage holding a random visitor ID; pages viewed, clicks and session recordings, with input fields masked | Understand and improve how visitors use the website (analytics) | 1 year | PostHog; PostHog privacy policy | Optional. For visitors in the United States it loads by default; turn it off at any time with Manage cookies in the website footer. Everywhere else it loads only if you accept optional cookies in the cookie banner. |
| BulkiApps app in Shopify admin (Company) | Browser local storage recording that a setup notice was dismissed; Shopify’s App Bridge script and admin font, loaded from Shopify’s CDN; a PostHog cookie and matching local storage holding a user ID for usage analytics | Remember that the Launch Waitlist setup notice was dismissed (functional); run the app inside Shopify admin (strictly necessary); measure how merchant staff use app features (analytics) | Notice flag: no automatic expiry, until browser site data is cleared. App Bridge: loaded each time the app opens. PostHog ID: 1 year. | The flag stays in the browser. Shopify serves App Bridge and the font under its Privacy Policy. PostHog receives pages viewed, clicks and feature use, without Shopper data or screen recordings, under its privacy policy. | App Bridge is needed for the app to work in Shopify admin. The notice flag can be cleared in browser settings, and the app works if your browser blocks PostHog. |
| Badges & Labels | Browser local storage, per product, and session storage | Configured countdown end and cart-timer state; functional display | Session entries end with the browser session. Local entries have no automatic storage expiry; a saved deadline is used only while valid. | Stored in the browser by BulkiApps storefront code. Shared network processing is described below. | Clear it in your browser settings. |
| WhatsApp Chat Button | Browser session storage | Remember that a greeting was shown; preference | Browser session | Browser storage; WhatsApp receives the chosen interaction only when its link is followed. | Follows the store's consent signal where available. |
| Free Shipping Bar | Browser session storage | Remember reward/discount codes obtained during the session | Browser session | Browser storage; applying a code sends it to Shopify cart functionality. | Used for the reward the Shopper is using; ends with the browser session. |
| Estimated Delivery Date | Browser session storage | Remember entered ZIP code and avoid repeating delivery-estimate cart updates | Browser session | ZIP code memory is browser storage; delivery attributes may be sent to Shopify cart. | ZIP code memory follows the store's consent signal. |
| Back in Stock & Preorder | Browser session storage | Remember variants already subscribed to; avoid duplicate prompts | Browser session | Browser storage; alert contact and product selections are separately sent to the notification service. | Remembered variants follow the store's consent signal. Signing up for an alert is a separate choice with its own notice. |
| Launch Waitlist | Browser local storage | Remember referral/signup state and the selected bypass of the waitlist display | No automatic storage expiry; until browser/site data is cleared or the relevant record is replaced | Browser storage; submitted signup/referral information is separately processed as described in Section 3. | The signup and referral script checks the store's consent signal. |
| Popups & Quizzes | Browser local or session storage, per campaign | Remember shown/completed campaign timestamps and session page count; campaign display/frequency | Session records end with the session. Local records have no automatic deletion period; configured frequency rules determine when timestamps stop suppressing a display. | Browser storage; submitted quiz/contact answers are separately sent to Company. | If the store's consent signal does not allow preference storage, the feature uses session storage instead of local storage. |
| Quantity Breaks & Bundles | Browser session storage, per product | Remember a Shopper-selected box while navigating products | Until the box is added to cart or the browser session ends | Browser storage; selected items are submitted to Shopify when added to cart. | Used for the box the Shopper is building. |
| Cart Drawer & Upsells | Browser local storage | Remember up to 12 recently viewed product handles | No time-based expiry; replaced as products are viewed or cleared with site data | Browser storage; product/cart selections and chosen paid additions also use Shopify cart functionality. | Clear it in your browser settings. |
| Web Push Notifications | Browser local and session storage; a browser push subscription and service worker | Remember subscribed topics, prompt dismissal and session page count; receive selected notifications | Session count ends with the session. Local records have no automatic storage expiry. Browser subscription/service worker persists until revoked, removed or expired by the browser. | Browser storage plus encrypted subscription data and delivery metadata processed by Company, its infrastructure providers and the browser-selected push service. | Notifications need the browser's own permission, which is separate from the store's cookie choices and from permission for marketing campaigns. Blocking notifications does not by itself delete the server records described in Sections 3 and 9. |
Shared network activity. Storefront features also report views, clicks and named events to the app proxy without setting a cookie. These requests are not anonymous; see the shared technical processing note in Section 3.
Choices and retention
On BulkiApps.com, the consent model depends on where you are. For visitors in the United States, the analytics, session-recording and advertising technologies above load by default, as U.S. state privacy laws allow; turn any of them off at any time with Manage cookies in the website footer. For visitors elsewhere, they load only if you accept optional cookies in the cookie banner. Either way, opting out of sale or sharing (Section 15, or the Do Not Sell or Share My Personal Information link in the footer), or sending a Global Privacy Control signal, turns off the advertising technologies, and the Meta Pixel runs with Meta's Limited Data Use setting, which applies California's rules to California residents. We tell the two models apart from your browser's time-zone setting, which stays on your device and is not sent anywhere; when it is unclear, you are asked. For storefront choices, use the store's controls or contact Merchant. Merchant configures its store's privacy notice and consent tools; Company remains responsible for what its features collect and store. Where the inventory says so, a feature checks the store's consent signal before using preference storage. A Merchant's approval of the app is not consent from its Shoppers. Optional technologies remain inactive until valid consent where required, with rejection and withdrawal available. Where opt-out rules apply, required controls and recognized preference signals, including applicable Global Privacy Control signals, are honored. Rejecting one optional purpose does not withdraw unrelated service requests, and necessary preference records may be retained.
Browser settings can restrict or remove storage and may affect functions. Push notifications always need the browser's own permission; disable them in browser site permissions or supplied subscription controls. Cookie choices do not necessarily revoke push permission or erase server records, and disabling push does not necessarily clear storage. Choices apply to the relevant browser or device unless account-wide controls are expressly provided.
The inventory gives device-storage durations. Some local entries have no automatic expiry; a feature can stop using an expired timestamp without deleting it. Server records follow Section 9 and the Schedule. Clearing browser storage does not erase all server records; applicable deletion rights remain available.
