Cookies

lilea.de Cookie Policy

Welcome to lilea.de's Cookie Policy. This policy helps you understand what cookies and tracking technologies we use, how we use them, and your rights regarding them.

Last updated: June 19, 2025

Introduction
How this Application Uses Trackers.
Managing Preferences
Definitions and Legal Information

Introduction

This document informs Users about the technologies this Application uses to achieve the purposes described below. These technologies enable access to or storage of information (e.g., by using cookies) on the User's device, or the use of the device's data processing capabilities, when the User accesses or runs this Application.

For simplicity, such technologies are referred to as "Trackers" throughout this document, unless there is a reason to differentiate.

For example, while cookies can be used in both web and mobile browsers, they are not applicable as browser-based trackers in mobile apps. Therefore, in this document, the term cookie is only used when referring specifically to that type of Tracker.

Some of the processing purposes for which Trackers are used require the User's consent. If consent is given, it can be freely revoked at any time according to the procedure described in this document.

This Application uses proprietary Trackers (so-called "first-party Trackers") and third-party Trackers in connection with third-party services (so-called "third-party Trackers"). Unless otherwise stated in this document, such third parties also have access to the Trackers they manage.

The duration and expiration of cookies and other comparable Trackers depend on the lifespan set by the provider or the respective third-party provider. Some of them expire as soon as the User ends the browser session.

To receive more precise and up-to-date information on the lifespan, as well as other information - such as regarding the use of further Trackers - Users are referred to the descriptions of the categories listed below, and furthermore, to the linked privacy policies of the relevant third-party providers or to contact the provider.

How this Application Uses Trackers.

Functionality

This Application uses so-called "technical" cookies and similar Trackers to enable operations that are strictly necessary for the performance and provision of the service.

Trackers Managed by Third Parties

Shopify

Company: Shopify Inc.

Place of processing: Canada

Personal Data processed: Device information +2

Shopify is a platform provided by Shopify Inc. that allows the provider to create, host, and operate an e-commerce website. This service may place Trackers on the User's device. The most up-to-date and comprehensive information can be found in the service's official documentation.

Personal Data processed:

Device information
Usage data
Tracker

Service provided by:

Shopify Inc. (Canada) – Privacy Policy

Tracker Duration:

_ab: 3 years
_cmp_a: 1 day
_customer_account_shop_sessions: 1 month
_landing_page: 14 days
_orig_referrer: 14 days
_pay_session: Session duration
_s: 30 minutes
_secure_account_session_id: 1 month
_secure_session_id: 1 day
_shopify_country: Session duration
_shopify_d: Session duration
_shopify_evids: Session duration
_shopify_fs: 1 year
_shopify_ga: indefinite
_shopify_m: Session duration
_shopify_s: 30 minutes
_shopify_sa_p: 30 minutes
_shopify_sa_t: 30 minutes
_shopify_tm: Session duration
_shopify_tw: Session duration
_shopify_y: 1 year
_storefront_u: 1 minute
_tracking_consent: Session duration
_y: 1 year
c: 2 years
card_update_verification_id: 20 minutes
cart: 14 days
cart_currency: 14 days
cart_sig: 14 days
cart_ts: 14 days
cart_ver: 14 days
checkout: 28 days
checkout_prefill: 5 minutes
checkout_queue_checkout_token: 2 years
checkout_queue_token: 2 years
checkout_session_lookup: 21 days
checkout_session_token: 21 days
checkout_session_token*: 21 days
checkout_token: 2 years
checkout_worker_session: 3 days
customer_account_locale: 1 year
customer_account_new_login: 20 minutes
customer_account_preview: 7 days
customer_auth_provider: indefinite
customer_auth_session_created_at: indefinite
customer_payment_method: 1 hour
customer_shop_pay_agreement: 20 minutes
discount_code: indefinite
dynamic_checkout_shown_on_cart: 30 minutes
hide_shopify_pay_for_checkout: indefinite
identity-state: 1 day
identity-state-*: 1 day
identity_customer_account_number: 3 months
keep_alive: 14 days
localization: 14 days
login_with_shop_finalize: 5 minutes
master_device_id: 2 years
order: 21 days
pay_update_intent_id: 20 minutes
preview_theme: indefinite
previous_step: 2 years
profile_preview_token: 5 minutes
remember_me: 2 years
secure_customer_sig: 1 year
shopify-editor-unconfirmed-settings: 16 hours
shopifyChatData: Session duration
shopify_pay: 2 years
shopify_pay_redirect: 1 hour
source_name: indefinite
storefront_digest: 3 years
tracked_start_checkout: 2 years

PayPal

Company: PayPal

Place of processing: See PayPal's Privacy Policy

Personal Data processed: Email +3

PayPal is a payment service provided by PayPal Inc. that allows Users to make online payments.

Personal Data processed:

Email
Usage data
Tracker
Payment data

Service provided by:

PayPal (See PayPal's Privacy Policy) – Privacy Policy

Tracker Duration:

LANG: 8 hours
__paypal_storage__: indefinite
akavpau_ppsd: Session duration
enforce_policy: Session duration
l7_az: Session duration
nsid: Session duration
ts: Session duration
tsrce: Session duration
x-cdn: Session duration
x-pp-s: Session duration

Visa

Company: Visa Inc.

Place of processing: United States

Personal Data processed: Email +3

Visa is a payment service provided by Visa Inc. that allows Users to make online payments.

Personal Data processed:

Email
Usage data
Tracker
Payment data

Service provided by:

Visa Inc. (United States) – Privacy Policy

Mastercard

Company: Mastercard Inc.

Place of processing: United States

Personal Data processed: Email +3

Mastercard is a payment service provided by Mastercard Inc. that allows Users to make online payments.

Personal Data processed:

Email
Usage data
Tracker
Payment data

Service provided by:

Mastercard Inc. (United States) – Privacy Policy

American Express

Company: American Express Company

Place of processing: United States

Personal Data processed: Email +3

American Express is a payment service provided by American Express Company that allows Users to make online payments.

Personal Data processed:

Email
Usage data
Tracker
Payment data

Service provided by:

American Express Company (United States) – Privacy Policy

Cloudflare

Company: Cloudflare, Inc.

Place of processing: United States

Personal Data processed: Tracker +1

Cloudflare is a service for traffic optimization and distribution provided by Cloudflare Inc. Due to the way Cloudflare's functions are integrated, the service filters all traffic occurring through this Application, i.e., communication occurring via this Application and the User's browser, and at the same time enables the collection of analytical data contained in this Application.

Personal Data processed:

Tracker
various types of data, as described in the service's privacy policy

Service provided by:

Cloudflare, Inc. (United States) – Privacy Policy

Tracker Duration:

_cfuvid: indefinite
cf_clearance: 30 minutes

Google Hosted Libraries

Company: Google LLC

Place of processing: United States

Personal Data processed: Usage data +1

Google Hosted Libraries is a service for traffic optimization and distribution provided by Google LLC.

Personal Data processed:

Usage data
Tracker

Service provided by:

Google LLC (United States) – Privacy Policy

Marketing

This Application uses Trackers to deliver advertising or marketing content and measure its performance.

Trackers Managed by Third Parties

Klaviyo

Company: Klaviyo Inc.

Place of processing: United States

Personal Data processed: Email +3

Klaviyo is a service for managing email addresses and sending messages provided by Klaviyo Inc.

To use the service offered by Klaviyo, the provider typically shares information about (shopping) users, such as contact details and purchase history. The extent of such sharing can be seen under "Personal Data processed."

Personal Data processed:

Email
Purchase history
Usage data
Tracker

Service provided by:

Klaviyo Inc. (United States) – Privacy Policy – Opt out

Tracker Duration:

__kla_id: 3 years

Manage Preferences and Give or Revoke Consent

If the use of Trackers is based on consent, Users can give or revoke this consent by setting or updating their preferences via the appropriate privacy selection panel on this Application.

Regarding all Trackers deployed by third parties, Users can manage their preferences by using the appropriate opt-out link (if available), using the means specified in the third party's privacy policy, or by contacting the third party.

How to Control or Delete Cookies and Similar Technologies via Your Device Settings.

Users can use their own browser settings to:

see which cookies or other similar technologies have been placed on the device;
block cookies or similar technologies;
delete cookies or similar technologies from the browser.

However, browser settings do not allow for detailed control of consent by categories.

For example, Users can find information on managing cookies via the most common browsers at the following addresses:

Users can also manage certain Trackers used within mobile apps via corresponding device settings – for example, via the device settings for advertising on mobile devices, or generally via tracking settings (Users can access device settings and search for the corresponding commands).

How to Opt-Out of Interest-Based Advertising

Furthermore, Users are advised that they can follow the instructions of YourOnlineChoices (EU and UK), Network Advertising Initiative (US), and Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow the User to set their tracking preferences for almost all advertising tools. The provider therefore recommends that Users make use of these means in addition to the information provided in this document.

The Digital Advertising Alliance offers the AppChoices application for controlling interest-based advertising in mobile apps.

Consequences of Refusing the Use of Trackers

Users are free to decide whether to give their consent for the use of Trackers or not. However, it should be noted that Trackers contribute to this Application being able to offer Users a better user experience and extended functions (in accordance with the purposes described in this document). If the User decides to block the use of Trackers, the provider may therefore not be able to provide corresponding functions.

Definitions and Legal Information

Personal Data (or Data)

Any information that directly or in connection with other information determines or can determine the identity of a natural person.

Usage Data

Information that this Application (or third-party services employed by this Application) collects automatically, such as: the IP addresses or domain names of the computers utilized by the Users who use this Application, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilized to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilized by the User, the various time details per visit (e.g., how much time was spent on each page within the Application) and the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data refers.

Data Processor (or Data Supervisor)

The natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller, as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including the security measures concerning the operation and use of this Application. The Data Controller, unless otherwise specified, is the Owner of this Application.

This Application

The means by which the Personal Data of the User is collected and processed.

Service

The Service provided by this Application as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references appearing in this document to the European Union include all current member states to the European Union and the European Economic Area.

Cookie

Cookies are Trackers consisting of small sets of data stored in the User's browser.

Tracker

Tracker indicates any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags or fingerprinting - that allows the tracking of Users, for example by enabling the access to or storage of information on the User's device.