Skip to main content

Cookie Policy

What cookies we use and how you can control them.

Last updated: 28 October 2026

This policy explains which cookies and similar technologies the Bounty Canarias online shop uses, what they are for, how long they last and how you can accept them, reject them or change your choice. The shop is run by Alrromoda SL, Tax ID (NIF) B38489464, Calle El Pilar 40, 38002 Santa Cruz de Tenerife, Canary Islands, Spain.

What cookies are

Cookies are small files a website stores in your browser. Some websites also store data in your browser's storage. In this policy we call both "cookies", and for each one we say whether it is a cookie or data stored in your browser.

Summary

  • Necessary: they make the shop work: your session, your bag, your language, payment and your cookie choice. They are always on and do not need your consent.
  • Analytics: they help us understand how the shop is used so we can improve it. We use Google Analytics and our own measurements of page speed and of the pages visited. They only switch on if you accept them.
  • Advertising: they let Google Ads learn, from Google Analytics, which of our ads bring visits and orders, and, if you arrive through one of our ambassadors' links, remember which one for 30 days. They do not personalise the ads you see. They only switch on if you accept them, and they need Analytics.
  • We do not use social media cookies.

How to accept, reject or change your choice

The first time you visit, we show a notice with three buttons: "Accept", "Reject" and "Customise". "Accept" switches on Analytics and Advertising; "Reject" switches on neither; in "Customise" you can choose each one. You can keep browsing without answering: until you accept, no analytics or advertising cookie is switched on.

You can change your choice at any time from "Cookie settings" at the bottom of every page. Withdrawing consent is as easy as giving it: when you do, we stop sending the data you no longer accept and delete the matching analytics or advertising cookies and data from your browser.

We keep your choice for 12 months. After that, or if we change the types of cookies or what we use them for, we will ask you again.

You can also delete or block cookies in your browser settings. If you block the necessary cookies, parts of the shop, such as the bag or signing in, will stop working.

Necessary cookies

They are essential to provide the service you ask us for, so they do not require your consent. Bounty Canarias sets all of them, except Stripe's, which we point out.

  • _medusa_jwt (cookie): keeps you signed in. Lasts 7 days or until you sign out.
  • _medusa_cart_id (cookie): remembers the products in your bag. Lasts 7 days.
  • _bounty_order_access (cookie): lets you see your order confirmation right after you buy. Lasts 2 hours.
  • bw_pw_reset and bw_ea_pw_reset (cookies): protect a password change when you use the link we email you. Last 10 minutes.
  • __early_access_site and __early_access_invite (cookies): while the shop is in early access, they let invited people in. Last 7 days.
  • _preferred_language (cookie): remembers the site language. Lasts until you close your browser or up to 30 days, depending on how you enter the shop or whether you choose a language.
  • _medusa_gender_preference (cookie): remembers whether you are browsing the women's or the men's section. Lasts 30 days.
  • pdp-has-options and pdp-has-multiple-images (cookies): help show a product page while it loads. Last 10 seconds.
  • bw_cookie_consent (cookie): stores your cookie choice, when you made it and a random identifier. That identifier, your choice and the date are also noted on our server, so we can show what you chose and when. The cookie lasts 12 months.
  • __stripe_mid and __stripe_sid (cookies from Stripe, our payment provider): set when you open checkout, used to prevent fraud. Last 1 year and 30 minutes respectively.
  • bounty_recently_clicked_products_v1 and bounty_recently_clicked_hidden_ids_v1 (data stored in your browser): remember the last products you opened to show you the "Recently viewed" list. When we show that list, your browser sends the codes of those products, never your name or email, to our search provider, Meilisearch, to hide the ones that are no longer for sale. Kept until you clear your browser data.
  • bounty-image-lqip-v1 (data stored in your browser): stores very small versions of images so the shop loads faster. It holds no personal data. Each image is kept for up to 90 days.
  • Browsing data for your visit (data stored in your browser during your visit): remembers where you were in a listing when you go back, which part of the brand list you were heading to from the menu, and the name, price and photo of the products you open, so their page shows at once. Deleted when you close the tab.

Analytics cookies (only if you accept them)

They help us know how many people visit the shop and how they use its pages, so we can improve it. They also measure the steps of a purchase (product viewed, added to the bag, checkout started and order placed) with the products, the amounts and the order number; with that number we can link these measurements to your order. They only switch on if you press "Accept" or switch on "Analytics" in "Cookie settings". If you do not, we do not load Google Analytics and we send no analytics measurement.

Google Analytics 4, from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland:

  • _ga (Google Analytics cookie on our domain): tells one visitor from another with a random identifier. Lasts up to 2 years.
  • _ga_ followed by our property's identifier (Google Analytics cookie on our domain): keeps the state of your visit. Lasts up to 2 years.

We have set up Google Analytics without Google Signals and without ad personalisation. It only uses advertising cookies if you also accept Advertising (see the next section). Before we send a page address to Google, we remove from it any data that could identify you. Google keeps Analytics data for 14 months. Google may process this data outside the European Economic Area; that transfer relies on the EU-US Data Privacy Framework, under which Google LLC is certified, and on the European Commission's standard contractual clauses. More information in Google's privacy policy, at policies.google.com/privacy.

Our own data in your browser:

  • bounty_ga_list_clicks_v1 (data stored in your browser): remembers which list in the shop you opened each product from (for example a category or search results), so Google Analytics can tell which lists lead to a purchase. It holds only the product, the list, its position there and when you opened it; never what you type, your name or your email. It keeps at most the last 50 products, each for up to 30 days or until you buy it.

Our own speed measurements: if you accept analytics, your browser also sends us data about how fast pages load: the type of page, the type of device (phone, tablet or computer) and the measured times. They include no identifier of yours, use no cookie and store nothing in your browser.

Pages visited, in our error monitoring: if you accept analytics, our error monitoring on Amazon Web Services (see "Other services that load in the shop") also records which pages you visit: their address, without the order number, and their title. That tells us on which pages errors appear. It uses no cookie and stores nothing in your browser.

If you withdraw your consent, we stop sending data to Google Analytics and stop sending these measurements, and we delete the _ga cookies and the bounty_ga_list_clicks_v1 data from your browser. Withdrawing Analytics also withdraws Advertising.

Advertising cookies (only if you accept them)

If you accept Advertising as well as Analytics, Google Ads can learn, from Google Analytics measurements, which of our ads on Google led to a visit or an order, so we spend on the ones that work. There is no separate Google Ads tag in the shop: Google Ads receives these measurements through Google Analytics. If you arrive from one of our ads, the page address includes a click code that Google adds, and we send it to Google Analytics with the page. We do not let Google use this data to personalise the ads you see. They switch on if you press "Accept" or switch on "Advertising" in "Cookie settings", and they need Analytics.

Google Ads, from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland:

  • _gcl_au and other cookies whose name starts with _gcl_ (Google cookies on our domain): link your visit to the click on one of our ads. Last up to 90 days.

Ambassador links, from Bounty Canarias:

  • bw_ambassador_ref (cookie): if you arrive at the shop through the personal link of one of our ambassadors, it remembers which one and when you arrived, so we know which orders they brought us. If you place an order within those 30 days, we note it on the order. If you follow another ambassador's link, it replaces the previous one. Lasts 30 days.

If you withdraw Advertising, we stop letting Google use these measurements for Google Ads and delete the _gcl_ and bw_ambassador_ref cookies from your browser.

Other services that load in the shop

  • Store map: the page where you find our stores shows a Google Maps map, from Google Ireland Limited. To load it, your browser connects to Google's servers, which receive your IP address. In our check, the map set no cookie and stored no data in your browser.
  • Images and videos: some of the shop's images and videos load straight from the servers of the third parties that host them, such as Cloudflare, Unsplash or some brands and distributors. To show them, your browser connects to those servers, which receive your IP address.
  • Product search and listings: the products in each section and your search results come from our search provider, Meilisearch, which receives the filters you choose and the words you search for. To show them, your browser may connect directly to its servers, which receive your IP address.
  • Error monitoring: to find pages that break and payments that fail, your browser sends Amazon Web Services, at its data centre in Frankfurt (Germany), the page's technical errors and, if a payment fails, the codes of your bag and of the payment and the reason for the error, with the page where it happened (its address and title) and your browser's language and type. It sends this even if you have not accepted analytics, because that is how we detect purchases that fail. Which pages you visit is sent only if you accept analytics. Before a page address is sent, we remove the order number from it. It sets no cookie. Amazon keeps this data for 30 days.
  • External payment methods: if you choose a payment method that takes you to its provider's website, that website applies its own cookies and its own policy.

More information

To find out how we process your personal data, see our Privacy Policy, linked at the bottom of every page. If you have questions about this policy, write to hola@bountycanarias.com.