This page explains which cookies and similar technologies we use in the VYKEA shop, why we use them, and what choices you have. Optional services are activated only after your express consent in accordance with Section 25 TDDDG (German Telecommunications Digital Services Data Protection Act). You can change your settings at any time via Cookie Settings in the footer.
Strictly necessary
These cookies are essential for the operation of the shop. They enable sign-in, the shopping cart, and secure payment. Without them, the shop cannot function. Consent is not required.
| Cookie | Purpose |
|---|---|
_medusa_jwt | Authentication token for logged-in customers |
_medusa_cart_id | Stores the current shopping cart ID |
_medusa_cache_id | Cache identifier for server-side optimisations |
pending_promo | Remembers an active promotional code until sign-in |
vykea_claim_* | Links guest orders to the customer account after sign-in |
vykea_consent_id | Unique ID for storing and tracking your consent decision |
cc_cookie | Stores the current status of your cookie consent choices (vanilla-cookieconsent) |
At checkout, Stripe sets further cookies for payment processing and fraud prevention (e.g. __stripe_mid, __stripe_sid). These are necessary for a secure transaction.
Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and legitimate interest in a functional and fraud-secure shop (Art. 6(1)(f) GDPR).
Functional (consent required)
These services improve the usability of the shop. They are activated only after your consent.
Intercom (live chat support) Intercom provides our chat widget. Where consent is active, your chat data is transferred to servers of Intercom R&D Unlimited Company, Ireland. Intercom processes data in part in the USA on the basis of the EU Standard Contractual Clauses. Without consent, the chat remains deactivated.
Google Maps Places (address autocomplete) At checkout, we offer an automatic address suggestion feature via the Google Maps Places API. Where consent is active, the address data you enter is transmitted to Google LLC, USA. Without consent, you enter your delivery address manually.
Legal basis: consent (Section 25 TDDDG, Art. 6(1)(a) GDPR).
Statistics (consent required)
These services help us to measure the performance and reach of the shop anonymously and to understand how our offering is used. They are activated only after your consent.
Vercel Analytics captures aggregated page-view statistics without storing personal data. Vercel Speed Insights measures Web Vitals (load times, interactivity) for technical optimisation. Both services run on the Vercel infrastructure in the EU and the USA.
Mixpanel is used for product analytics and for session recording (Session Replay), in particular for evaluating conversion funnels, usage behaviour, and cohort analyses, as well as for improving user guidance. The data processed comprises event data (e.g. page views, clicks on certain elements, order completions), a pseudonymous device or user identifier, and recorded session journeys. Input fields (in particular passwords, email addresses, telephone numbers, and all other form fields) are masked in the browser and are not transmitted to Mixpanel. We operate Mixpanel via the EU region (api-eu.mixpanel.com); a transfer to Mixpanel Inc., One Front Street, Floor 28, San Francisco, CA 94111, USA, may take place on the basis of the EU Standard Contractual Clauses.
Legal basis: consent (Section 25 TDDDG, Art. 6(1)(a) GDPR).
International data transfers
Several of the services named above process data in part outside the European Economic Area, in particular in the USA:
- Intercom (Ireland, USA) on the basis of the EU Standard Contractual Clauses
- Google (USA) on the basis of the EU-US Data Privacy Framework and the EU Standard Contractual Clauses
- Mixpanel (USA) on the basis of the EU Standard Contractual Clauses
- Vercel (USA) on the basis of the EU Standard Contractual Clauses
We have concluded corresponding data processing agreements (DPAs) with all providers and ensure that appropriate safeguards pursuant to Art. 46 GDPR are in place.
Managing consent
You can adjust or withdraw your cookie settings at any time via the Cookie Settings link in the footer of this page. When a consent is withdrawn, the affected services are deactivated on the next page load.
Further information on the processing of your data can be found in our Privacy Policy.