Cookie Policy
Who we are · what this covers
The controller is Xiao Hu Xing Chen Technology Limited, Units 908-915, Level 9, Core F, Cyberport 3, 100 Cyberport Road, Hong Kong, Business Registration No. 80735065 — support@xteink.com. The same company operates both our global store at xteink.com and our EU store at eu.xteink.com, so one controller covers both. This policy covers the cookies, pixels, local storage, and app SDKs we place on your device through either store. How we handle personal data more generally is described in our Privacy Policy.
The rule we follow
In the EU and UK, storing information on your device or reading it back requires your consent unless it is strictly necessary to provide a service you expressly requested or to transmit a communication (§ 25 TDDDG; PECR 2003, reg. 6). Strictly necessary cookies are therefore set without consent; all others only with your consent, which is our legal basis under Article 6(1)(a) GDPR. Consent is given per purpose and may be withdrawn at any time.
The four categories
Strictly necessary — always active: cart and checkout, security, load balancing, record of your choice. Functional — off by default: language, region, currency. Analytics — off by default: pages visited, where visitors leave. Marketing — off by default: measuring our advertising, relevant ads elsewhere.
The cookies we set
Article 13(1)(e) GDPR requires recipients to be identified, so each provider is named below.
| Cookie | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
_shopify_essential |
Shopify | Cart and checkout session | Strictly necessary | 1 year |
_secure_session_id |
Shopify | Login state and navigation integrity | Strictly necessary | Session |
keep_alive |
Shopify | Load balancing and availability | Strictly necessary | 30 minutes |
_cmp_a |
Shopify | Records the cookie choice you made | Strictly necessary | 1 day |
localization, cart_currency |
Shopify | Country, language and checkout currency | Functional | 1 year / 2 weeks |
_shopify_y, _shopify_s |
Shopify | Store analytics: pages, referrer, session | Analytics | 1 year / 30 min |
_ga, _ga_<ID> |
Google Analytics 4: visitors and sessions | Analytics | 2 years | |
_gcl_au |
Ad click attribution and conversion measurement | Marketing | 90 days | |
_fbp, _fbc |
Meta | Pixel deduplication and ad click attribution | Marketing | 90 days |
_ttp |
TikTok | Ad measurement and remarketing | Marketing | 13 months |
__cf_bm |
Cloudflare | Distinguishes humans from bots | Strictly necessary | 30 minutes |
Where a lifetime differs from the table, the value set in your browser governs.
Your choice
Your choice is stored for 12 months; we ask again before it expires, and a previous acceptance never covers a new purpose or a revised version of this policy. Change it at any time through Cookie settings in the footer — refusing takes the same number of clicks as accepting and costs nothing. Your browser can also block or delete cookies, though the cart and checkout depend on strictly necessary ones.
Where your browser sends a Global Privacy Control signal and the law of your State treats it as binding, we treat it as a rejection of non-essential cookies. California residents may opt out of Marketing cookies as “sharing” under the CPRA through the same panel; see our Privacy Policy.
Changes and contact
We may update this policy when we add or remove a provider or change a purpose; the version and date above identify the current version, and a new purpose or provider triggers a fresh request for consent. Questions and rights requests: support@xteink.com. This English version governs; translations are for convenience only.
Cookie Policy v1.0, 6 November 2026 · This English version governs; translations are for convenience only