Cookie policy
Last updated: 2026-05-15
2. Scope
This cookie policy describes how cookies are used on storeborn.se, in the admin panel and on other websites and services operated by Storeborn.
Cookies used in the stores operated by merchants on the Storeborn platform are not covered by this policy. Each merchant is the data controller for their own store and is responsible for maintaining their own cookie policy there, based on the features and integrations the merchant chooses to enable. As a platform, we provide a consent banner and the technical building blocks the merchant needs to fulfil its own obligations, but the choices made within a store are governed by the relevant merchant.
3. Legal basis and consent
We rely on two legal bases for cookies under the Swedish Electronic Communications Act and the GDPR:
Strictly necessary cookies — required for the website to function (login, security, language choice, consent storage). These cookies are set without prior consent because they are necessary to deliver the requested service.
Analytics and marketing cookies — require your active consent. On your first visit, we display a cookie banner where you can accept all cookies, reject all but the necessary ones, or choose category by category. Before you have made a choice, no analytics or marketing cookies are set; we apply Google Consent Mode with the default value "denied" until consent is given.
You can change or withdraw your consent at any time via the cookie settings in the footer. Withdrawing consent does not affect the lawfulness of processing carried out prior to the withdrawal.
4. Categories of cookies we use
We classify the cookies we set into three categories:
Strictly necessary cookies — required for basic functionality and security. This includes:
(a) session cookies for login and account state in the admin panel, (b) CSRF protection to prevent forged requests, (c) language and region preferences so the website is displayed in the right language, (d) a consent cookie that stores your cookie choices (`sb_web_cookie_consent`) so we can respect them on return visits.
Analytics cookies — only used if you have given consent. They help us understand how the website is used, which pages are most visited and where users encounter problems, so that we can improve the experience. We currently use Google Analytics 4 (with IP anonymisation and Google Consent Mode v2). Cookies typically set include `_ga` and `_ga_<id>`.
Marketing cookies — only used if you have given consent. May be used for conversion tracking, campaign measurement and relevant advertising on external platforms. This category is currently available as a setting in the consent banner but no marketing cookies are set on storeborn.se. Should we begin using such cookies, we will update this policy before they are activated.
5. Session and persistent cookies — retention
Session cookies are deleted automatically when you close the browser. Persistent cookies have a predefined lifetime and are deleted either after that period or when you remove them yourself.
Retention is governed by the cookie's function. As a rule of thumb:
(a) Strictly necessary cookies have the shortest lifetime required for the function — typically session-based or up to a few months for items such as language and consent choices. (b) The consent cookie has a lifetime of up to twelve (12) months so that you do not need to make your choice again on every visit. (c) Google Analytics 4 analytics cookies typically have a lifetime of up to twenty-four (24) months. (d) Marketing cookies, if activated in the future, have the lifetime stated by the respective provider; the policy will specify the lifetimes before any such cookies are activated.
6. Third-party providers
Certain cookies are set by third-party providers that we engage for specific purposes. This currently includes:
Google Ireland Limited — for Google Analytics 4. Google processes the data as a controller for its own purposes under Google's own privacy policy. We have enabled IP anonymisation and Google Consent Mode v2 so that no analytics cookies are set without your consent.
Other third-party providers (for example for security, CDN, payments and communication) may, in exceptional cases, set strictly necessary cookies so that the service can function correctly. A current overview of our sub-processors that process personal data is described in the privacy policy.
Third-party providers have their own privacy policies that govern how they process data. We recommend that you read their policies for full information about their processing.
7. Cookies in your store's storefront
If you are a merchant on Storeborn, your store is operated on our platform, but you are the data controller for your store's own processing of visitor personal data, including cookies. The cookies set in the storefront depend on the features and integrations you choose to enable (e.g. analytics tools, advertising pixels, affiliate systems, customer-service chats).
Storeborn provides a consent banner and technical tools to help you fulfil your own obligations, but the responsibility for ensuring that the store's cookie policy is complete and accurate — and that consent is collected in the way the law requires — rests with you as the merchant.
For information about which cookies are used in a specific store, please refer to that store's own cookie policy and consent banner.
8. Similar technologies
In addition to traditional cookies, we may use the following technologies:
localStorage and sessionStorage — store smaller amounts of data in your browser, for example to remember your most recently selected tab, view or draft in the admin panel. Treated the same way as cookies in the categorisation above.
Pixels and web beacons — small images or scripts that can be used to measure whether a page has been loaded or an action carried out. They are subject to the same consent regime as cookies in the analytics and marketing categories.
We do not use fingerprinting techniques to identify you across sessions or devices without your consent.
9. How to manage and change your cookie choices
You can manage your cookie choices at any time in several ways:
Via the cookie banner or the "Cookie settings" link in the footer — here you can change your consent for analytics and marketing cookies at any time.
Via your browser settings — you can block all cookies, allow all of them, or block only third-party cookies. Most browsers also allow you to delete existing cookies. Note that blocking or deleting strictly necessary cookies may cause parts of the website to stop functioning correctly.
Via the third party's own tools — for example Google's settings for ads and analytics (adssettings.google.com and tools.google.com/dlpage/gaoptout) — which provide additional ways of limiting how each provider processes your data.
10. Consequences of blocking cookies
You are fully entitled to refuse analytics and marketing cookies. This does not affect your ability to use the website — we provide all functionality in the admin panel regardless of your choice.
If, however, you block strictly necessary cookies — for example by disabling cookies completely in your browser — parts of the website may stop functioning correctly. For example, it may become impossible to log in, your session may be interrupted unexpectedly, or language and region preferences may not be remembered between visits.
11. Changes to the policy
We may update this cookie policy from time to time — for example if we start using new technologies, change providers or adjust how long cookies are stored. For material changes, we notify you via the cookie banner, which is shown again so that you can make an active choice based on the updated circumstances. Minor editorial changes may be published directly.
The most recent update date is always shown at the top of the page.
12. Contact
For questions about this cookie policy or about how we use cookies, please contact us at privacy@storeborn.se.
For other questions about the processing of personal data, please refer to our privacy policy and the contact details set out there.