Cookies Policy
Last updated: 21 July 2026
This Cookies Policy explains how Vochlea Music Ltd (“Vochlea”, “we”, “us”) uses cookies and similar technologies on this website. It should be read together with our Privacy Policy, which explains how we handle your personal data more generally.
What are cookies?
A cookie is a small text file of letters and numbers that a website stores on your device when you visit it. We also use similar technologies, including your browser’s local storage and tracking pixels. We refer to all of these as “cookies” in this policy.
Some cookies are needed to make the site work or to remember your preferences. Others — only where you allow them — help us understand how the site is used and support our advertising. Cookies set by Vochlea are “first-party” cookies; cookies set by another company (such as Shopify, PostHog or Meta) are “third-party” cookies.
Your choices and how to manage consent
Our store runs on Shopify, and consent is managed through Shopify’s privacy banner. When consent is required in your region, the banner lets you Accept, Decline, or Manage preferences for analytics and marketing cookies.
Strictly necessary and functional cookies are always active because the site and checkout cannot work properly without them, so they do not require your consent. Analytics and marketing cookies are switched off by default and are only set after you opt in. If you do not consent, PostHog is not loaded at all and makes no requests, and the Meta pixel loads in a suppressed state — it sets no cookies and fires no tracking events until you consent. One exception applies to embedded YouTube videos, which load without waiting for your choice — see Embedded third-party content below.
You can change or withdraw your choice at any time, and withdrawing consent is as easy as giving it. Where we show a cookie preferences banner (for example in the UK and EU), you can reopen it with the button below; you can also clear cookies in your browser to be asked again.
If you are in the United States, you also have the right to opt out of the “sale” or “sharing” of your personal information for targeted advertising. You can do that on our Your Privacy Choices page.
Strictly necessary & functional cookies
These cookies are required for the website and checkout to function and to remember basic choices. They do not track you across other websites and are exempt from consent. Shopify, which powers our store and hosted checkout, may also set additional strictly-necessary security cookies on its checkout domain.
| Name | Provider | Duration | Purpose |
|---|---|---|---|
_tracking_consent | Shopify | 1 year | Stores your cookie-consent choices so we can apply them on your future visits. Set by Shopify’s privacy banner, which powers our store. |
cart | Shopify | Session (until you close your browser) | Remembers the products in your shopping cart so they persist as you browse the store. |
session | Vochlea | 30 days | Keeps you signed in to your Vochlea account and secures your session. Set only when you log in to the customer portal. |
pending_checkout_cart | Vochlea | 1 hour | Briefly links your cart to your order when you proceed to our Shopify-hosted checkout, so we can show your order confirmation afterwards. |
user_uuid, survey_id | Vochlea | 1 day | Used by our post-purchase “How did you hear about us?” survey to record your answer and avoid asking twice. Set only on the order-confirmation page. |
lang_suggest_dismissed | Vochlea | 180 days | Remembers that you dismissed (or acted on) the banner offering this page in your browser’s language, so we don’t show it again. Stores only a yes/no flag — no personal data. |
Analytics cookies
These cookies help us understand how visitors use our site so we can improve it. They are only set if you give “analytics” consent. We use PostHog (privacy-friendly product analytics, hosted in the EU) and Shopify’s built-in store analytics. If you are signed in to your account, analytics events may be associated with your account. We also use Sentry for error monitoring; it is used under legitimate interest, strips personal data, and sets no cookies.
| Name | Provider | Duration | Purpose |
|---|---|---|---|
ph_<id>_posthog | PostHog | 1 year | PostHog product analytics. Stores a randomly generated ID so we can understand how visitors use the site and improve it. Only set after you give analytics consent — until then PostHog is not loaded at all and makes no requests. Data is processed in the EU. PostHog also stores equivalent entries in your browser’s local storage (likewise only after consent). |
_shopify_y | Shopify | 1 year | Shopify’s built-in store analytics. Distinguishes unique visitors for our commerce reporting. |
_shopify_s | Shopify | 30 minutes | Shopify’s built-in store analytics. Tracks the current browsing session. |
_ph_hero_variant | Vochlea | 30 days | Records which version of a product page you were shown in a PostHog A/B test, so we can measure which performs better and attribute a later purchase to the version you saw. Only set after you give analytics consent (the experiment runs through PostHog, which is not loaded until then) and removed if you withdraw it. |
Advertising & marketing cookies
These cookies support our advertising and email marketing, and are only set if you give “marketing” consent. The Meta pixel measures the performance of our advertising and helps show you relevant ads on Facebook and Instagram; we also send a matching server-side purchase event to Meta (the Conversions API), which uses the same consent and sets no additional cookies. Klaviyo’s onsite tracking recognises you and records your on-site activity (such as the pages you view) so we can send you relevant marketing emails; its script is not loaded until you consent. We do not use TikTok, Reddit, AdRoll or other advertising trackers on this site.
Google Ads. We advertise on Google and YouTube. We do not load any Google advertising script or tag manager on this site, and Google sets no cookies here. Instead, when you arrive from one of our ads, Google adds a click identifier (a “gclid” or “wbraid”) to the web address you land on. If — and only if — you have given “marketing” consent, we read that identifier from the address and save it in our own _vochlea_gads cookie (listed below) so it is still available when you check out. We then record it against your order, so that we can later report the purchase to Google Ads and credit it to the ad you clicked.
Until you give marketing consent we do not read the identifier from the address at all — we do not store it temporarily and we do not hold it while waiting for your answer. If you decline, or later withdraw your consent, the cookie is deleted and nothing is reported to Google. The cookie expires automatically after 90 days, which is the longest period over which Google Ads credits a purchase to an earlier ad click.
| Name | Provider | Duration | Purpose |
|---|---|---|---|
_fbp | Meta (Facebook & Instagram) | 90 days | Set by the Meta pixel to measure and deliver our advertising. Only set after you give marketing consent; the pixel is loaded in a suppressed state until then. |
_fbc | Meta (Facebook & Instagram) | 90 days | Stores an ad-click identifier (from a Facebook or Instagram ad) so a resulting purchase can be attributed to that ad. |
_vochlea_gads | Vochlea (shared with Google) | 90 days | Preserves the Google Ads click identifier (a “gclid” or “wbraid”, together with the time it was captured) that Google adds to the web address when you arrive from one of our ads, so that a purchase you make later can be credited to the ad you clicked. Only set after you give marketing consent — until then we do not read the identifier from the address at all — and deleted if you withdraw it, after which no conversion is sent to Google. It expires after 90 days, the longest period Google Ads attributes a purchase to a click. |
__kla_id | Klaviyo | Up to 2 years | Set by Klaviyo’s onsite tracking script to recognise you across visits and record your on-site activity (such as the pages you view) for our email marketing. Only set after you give marketing consent — the script is not loaded until then. Klaviyo also stores related identifiers in your browser’s storage (for example _kx, used to link clicks from our marketing emails). |
Embedded third-party content
Some pages include content embedded from other services, such as YouTube or Vimeo videos and Typeform forms and quizzes. When that content loads, the provider may set its own cookies or store data on your device, over which we have limited control. These are governed by the provider’s own privacy and cookie policies (linked below).
YouTube videos load automatically. Where a page contains an embedded YouTube video, the player is loaded as soon as you open that page — before, and regardless of, any cookie choice you make. This means YouTube (Google) receives your IP address and may store data on your device from that moment. We use YouTube’s privacy-enhanced (“no-cookie”) mode, which limits what is stored unless you press play, but it does not prevent the connection to YouTube. If you would rather this did not happen, avoid pages with embedded videos, or block third-party content for this site in your browser settings.
Vimeo videos and Typeform embeds are handled differently: they are not loaded until you have given consent or clicked the “Load content” button shown in their place.
| Name | Provider | Duration | Purpose |
|---|---|---|---|
VISITOR_INFO1_LIVE, YSC, __Secure-* (plus yt-* in local storage) | YouTube (Google) | Session up to ~2 years | Set when an embedded YouTube video loads or plays, to remember playback preferences and measure views. YouTube videos load automatically when you open a page that contains one, so YouTube is contacted whether or not you have accepted cookies. We use YouTube’s privacy-enhanced (“no-cookie”) mode, so what YouTube stores is limited unless you actually play a video. |
vuid (plus player cookies) | Vimeo | Up to ~2 years | Set when an embedded Vimeo video loads, to store playback preferences and analytics. |
Various (e.g. attribution_user_id) | Typeform | Up to 1 year | Set when an embedded Typeform form, quiz or survey loads, to support its functionality and usage statistics. |
Third parties and their privacy policies
Where cookies or data are handled by a third party, that company is the data controller for the data it collects. You can learn more, and in some cases opt out directly, using the links below:
- Shopify — privacy policy
- PostHog — privacy policy
- Meta (Facebook & Instagram) — privacy policy
- Google (YouTube & Google Ads) — privacy policy · opt out
- Vimeo — privacy policy
- Typeform — privacy policy
- Sentry (error monitoring — no cookies) — privacy policy
- Klaviyo (email marketing & onsite tracking) — privacy policy
Controlling cookies in your browser
In addition to the cookie banner, most browsers let you view, manage and delete cookies through their settings, and block some or all cookies. Please note that if you block all cookies (including strictly necessary ones), some parts of our website may not work correctly. General information about cookies is available at aboutcookies.org.
Changes to this policy
We may update this Cookies Policy from time to time to reflect changes to the technologies we use or for legal reasons. The date at the top of this page shows when it was last updated.
Contact us
If you have any questions about this Cookies Policy or how we use cookies, please contact us at help@vochlea.co.uk. For more information about how we process your personal data, see our Privacy Policy.
If you are in the UK or EU and are unhappy with how we handle your data, you have the right to lodge a complaint with your data protection authority. In the UK this is the Information Commissioner’s Office (ICO), ico.org.uk.