Cookie Policy
Effective date: 2026-07-10. Last updated: 2026-07-10.
This Cookie Policy explains how Lodestar GmbH ("Lodestar TCG", "we") uses cookies and similar technologies on this store, and the choices you have. It supplements our Privacy Policy. Controller in the meaning of Art. 4(7) GDPR and Art. 5(j) revFADP is Lodestar GmbH, Guggerhofstrasse 3, 6374 Buochs (NW), Switzerland, CHE-187.728.340. Questions: contact@lodestarsystems.ch.
1. What cookies are
Cookies are small text files stored on your device. We also use comparable technologies (local storage, pixels, SDKs); we refer to all of them as "cookies" here. Cookies can be first-party (set by this store) or third-party (set by a service we use, e.g. analytics). They last either for one browsing session or for a fixed persistent period.
2. Legal basis & your consent
- Strictly necessary cookies run without consent: they are required to operate the store (Art. 6(1)(b): contract performance: and/or 6(1)(f) GDPR; § 25(2) TDDDG: the German cookie-consent law, ex-TTDSG, renamed 14 May 2024 / ePrivacy Art. 5(3) "strictly necessary" exemption).
- All other cookies (analytics, marketing, non-essential preferences) are set only after you opt in via our cookie banner: prior, specific, informed consent (Art. 6(1)(a) GDPR + ePrivacy Art. 5(3); CJEU Planet49 C-673/17). You can refuse them with the same ease you accept them, and withdraw consent at any time (Art. 7(3)).
- Switzerland (revFADP): there is no cookie-specific consent provision equivalent to ePrivacy; non-sensitive analytics may rely on legitimate interests with a right to object. Because most of our visitors are in the EU, we apply EU-standard opt-in consent to all visitors.
3. Cookies we use
The table below lists the categories and representative cookies. Exact names, providers and durations depend on the tools currently enabled and may change; the live, authoritative list is the one shown in the store's cookie banner preferences. Non-essential rows are loaded only with your consent.
| Category | Example cookie | Provider | Purpose | Type | Duration |
|---|---|---|---|---|---|
| Strictly necessary | cart, cart_sig, _shopify_essential, secure_customer_sig, keep_alive, localization | Shopify (first-party) | Session, cart, checkout, sign-in, language/region, fraud prevention | First-party | 30 min (keep_alive); 2 weeks (cart, cart_sig, localization); 1 year (secure_customer_sig, _shopify_essential) |
| Consent record | _tracking_consent | Shopify (first-party) | Stores your cookie choices so we honour them | First-party | ~1 year |
| Analytics (consent) | _shopify_y, _shopify_s | Shopify (first-party) | Visitor & session analytics, store performance (Shopify is migrating this to the Web Pixels API; the cookies actually set are shown in the live banner) | First-party | _shopify_s ~30 min; _shopify_y ~1 year |
| Analytics (consent) | _ga, _ga_<id>, _gid | Google Analytics 4 | Audience & behaviour measurement (only if GA4 is enabled) | Third-party | _gid ~24 h; _ga / _ga_<id> ~2 years |
| Marketing (consent) | _fbp; _gcl_au | Meta; Google Ads | Ad measurement & retargeting (only if these pixels are enabled) | Third-party | ~3 months |
4. How we ask for consent
On your first visit (and when your stored choice expires) a cookie banner appears. It offers Accept all and Reject all as equally prominent options, plus Preferences to choose per category (necessary cookies cannot be switched off). Non-essential cookies and marketing/analytics tags do not run until you accept the relevant category. Our store uses Shopify's native consent management (the Customer Privacy API), which blocks Shopify-managed pixels until you opt in.
5. Managing or withdrawing consent
- Use the "Cookie settings" link in the site footer at any time to re-open the preferences panel and change or withdraw your choices (Art. 7(3) GDPR: withdrawal is as easy as giving consent).
- You can also block or delete cookies in your browser settings. Strictly necessary cookies cannot be disabled without breaking core store functions (e.g. the cart).
6. Third parties
Where third-party cookies are enabled, those providers process data under their own policies: e.g. Google (policies.google.com/privacy) and Meta (facebook.com/privacy/policy/). Transfers outside Switzerland/the EEA rely on the safeguards described in our Privacy Policy (adequacy decisions, Data Privacy Framework, or Standard Contractual Clauses).
7. Changes
We may update this Cookie Policy as the tools we use change. Material changes are reflected in the "Last updated" date above and, where required, re-prompt your consent.