Cookie Policy
Last updated April 5, 2026
This Cookie Policy explains how Aspen Kay Natural, Inc. ("Company," "we," "us," and "our") uses cookies and similar technologies to recognize you when you visit our website at https://aspenkaynaturals.com ("Website"). It explains what these technologies are and why we use them, as well as your rights to control our use of them.
In some cases we may use cookies to collect personal information, or that becomes personal information if we combine it with other information. Personal information collected through cookies is governed by our Privacy Policy, available at https://aspenkaynaturals.com/pages/privacy-policy.
Â
1. WHAT ARE COOKIES?
Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.
Cookies set by the website owner (in this case, Aspen Kay Natural, Inc.) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.
Â
2. WHY DO WE USE COOKIES?
We use first- and third-party cookies for several reasons. Some cookies are required for technical reasons in order for our Website to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies enable us to track and target the interests of our users to enhance their experience. Third parties serve cookies through our Website for advertising, analytics, and other purposes. This is described in more detail in Section 4 below.
Â
3. YOUR RIGHTS AND HOW TO CONTROL COOKIES
You have the right to decide whether to accept or reject non-essential cookies. You can exercise your cookie rights through the methods described below.
Â
Cookie Consent Manager
You can exercise your cookie preferences by setting your choices in our Cookie Consent Manager, which can be found in the notification banner and on our website. Essential cookies cannot be rejected as they are strictly necessary to provide our services.
Â
Global Privacy Control (GPC) and Universal Opt-Out Signals
Important — Legally Binding Opt-Out Signals: Pursuant to the California Consumer Privacy Act (CCPA/CPRA) and the laws of California, Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Minnesota, and Maryland, we are required to honor Universal Opt-Out Mechanism (UOOM) signals, including Global Privacy Control (GPC), as legally binding requests to opt out of the sale and sharing of personal information and targeted (cross-context behavioral) advertising.
If your browser or browser extension is configured to send a GPC signal when you visit our Website, we will treat that signal as a valid opt-out request and will:
•      Disable non-essential third-party tracking and advertising cookies for your session
•      Stop sharing your personal data with advertising partners for that visit
•      Display confirmation on the Website that your opt-out preference signal has been recognized and honored
Â
GPC is available as a built-in feature in browsers such as Brave and DuckDuckGo, and as an extension for Firefox and Chrome. We conduct regular audits of our cookie banner and opt-out mechanisms to ensure they correctly detect and act on GPC signals.
Note: If there is a conflict between your GPC signal and preferences set manually in our Cookie Consent Manager, we will prioritize the GPC signal as the more privacy-protective choice, in accordance with CPPA Enforcement Advisory No. 2024-02.
Â
Symmetry of Choice
In compliance with CPPA Enforcement Advisory No. 2024-02 and the CPPA's March 2025 enforcement action guidelines, our cookie consent interface is designed to offer "symmetry of choice" — meaning that opting out of non-essential cookies is no more difficult or time-consuming than accepting them. We do not use dark patterns or confusing language in our consent interface.
Â
Browser Controls
You may also set or amend your web browser controls to accept or refuse cookies. If you choose to reject cookies, you may still use our website, though your access to some functionality and areas may be restricted. Instructions for the most popular browsers:
•      Chrome: Settings > Privacy and Security > Cookies and other site data
•      Firefox: Settings > Privacy & Security > Cookies and Site Data
•      Safari: Preferences > Privacy > Manage Website Data
•      Microsoft Edge: Settings > Cookies and site permissions
•      Opera: Settings > Advanced > Privacy & security
Â
Most advertising networks also offer a way to opt out of targeted advertising. For more information, visit:
•      Digital Advertising Alliance (DAA): https://optout.aboutads.info
•      Digital Advertising Alliance of Canada: https://youradchoices.ca
•      European Interactive Digital Advertising Alliance: https://www.youronlinechoices.eu
Â
4. WHAT TYPES OF COOKIES DO WE USE?
The specific types of first- and third-party cookies served through our Website and the purposes they perform are described below. Please note that the specific cookies served may vary depending on which areas of the Website you visit.
Â
Essential Website Cookies (Cannot be rejected — required for the Website to function)
|
Cookie Name |
Purpose |
Provider |
Type / Expires |
|
cart_currency |
Used in connection with shopping cart to maintain currency selection. |
Shopify (Canada) |
server_cookie / 14 days |
|
secure_customer_sig |
Used in connection with customer login and account security. |
Shopify (Canada) |
server_cookie / 1 year |
|
rc::a |
Used to distinguish humans from bots via Google reCAPTCHA to protect forms from spam. |
Google (USA) |
html_local_storage / persistent |
|
cart_ver |
Tracks the version of the shopping cart for compatibility. |
Shopify (Canada) |
server_cookie / 14 days |
|
cart |
Stores the contents of your shopping cart. |
Shopify (Canada) |
server_cookie / 14 days |
|
localization |
Stores your preferred language/region setting. |
Shopify (Canada) |
server_cookie / 1 year |
|
keep_alive |
Maintains an active session while you are browsing. |
Shopify (Canada) |
server_cookie / 30 min |
|
shopify_pay_redirect |
Used to redirect to the correct payment page during checkout. |
Shopify (Canada) |
http_cookie / 59 min |
Â
Performance & Functionality Cookies (Non-essential — can be rejected)
|
Cookie Name |
Purpose |
Provider |
Type / Expires |
|
cart_ts |
Timestamp cookie used in connection with checkout to track cart activity timing. |
Shopify (Canada) |
server_cookie / 14 days |
|
cart_sig |
Security signature used in connection with shopping cart to verify cart integrity. |
Shopify (Canada) |
server_cookie / 14 days |
|
XSRF-TOKEN |
Helps with site security by preventing Cross-Site Request Forgery (CSRF) attacks during preorder management. |
preordermanager.amai.com (USA) |
server_cookie / 2 hours |
|
preorder2_session |
Session cookie for the pre-order manager app to track your pre-order session. |
preordermanager.amai.com (USA) |
server_cookie / 2 hours |
|
spurit-global-multitabs.* |
A set of local storage items used by the SpurIT multi-tab cart sync app to keep cart data consistent across browser tabs. |
Shopify (Canada) |
html_local_storage / persistent |
|
pixelpop-session |
Session storage used by a promotional popup app to track whether a popup has been shown in your current session. |
Shopify (Canada) |
html_session_storage / session |
|
_shopify_d |
Shopify internal cookie used for domain tracking and session identification. |
Shopify (Canada) |
http_cookie / session |
|
_pay_session |
Session cookie used by Shopify Pay (Shop Pay) to manage the checkout session. |
shop.app (Canada) |
server_cookie / session |
|
kaktus_also_bought_together_session |
Session cookie for the Kaktus 'Frequently Bought Together' product recommendation app. |
fbt.kaktusapp.com (USA) |
server_cookie / session |
|
kaktusfCurrentShownPerDay/Month |
Tracks how many times promotional content from the Kaktus app has been shown per day/month to limit repetition. |
Shopify (Canada) |
http_cookie / ~24 days |
|
kaktusfStartDatePerDay/Month |
Stores start-date reference for Kaktus app display frequency tracking. |
Shopify (Canada) |
http_cookie / 23-24 days |
|
_session_id (one.store) |
Session management for the One Store widget and interaction apps. |
interactions.one.store / widget-api.one.store (USA) |
server_cookie / session |
|
_cmp_a |
Used by Shopify's consent management platform to store your cookie consent preferences for 1 day. |
Shopify (Canada) |
server_cookie / 1 day |
|
History.store |
Session storage tracking browsing history within the current session for navigation purposes. |
Shopify (Canada) |
html_session_storage / session |
Â
Analytics & Customization Cookies (Non-essential — can be rejected)
|
Cookie Name |
Purpose |
Provider |
Type / Expires |
|
_ga |
Google Analytics: Records a unique client ID used to generate data about website usage by the user. |
Google Analytics (Canada) |
http_cookie / ~13 months |
|
_ga_# |
Google Analytics 4: Used to distinguish individual users and calculate visits and sessions. |
Google Analytics (Canada) |
http_cookie / ~13 months |
|
_gid |
Google Analytics: Keeps an entry of a unique ID used to generate statistical data on website usage. Expires after ~24 hours. |
Google Analytics (Canada) |
http_cookie / 24 hours |
|
_gat |
Google Analytics: Used to throttle the request rate to Google Analytics servers when using Google Tag Manager. |
Google Analytics (Canada) |
http_cookie / < 1 minute |
|
#collect |
Google Analytics pixel tracker: Sends data such as visitor behavior and device information to Google Analytics. Active only during the browsing session. |
google-analytics.com (USA) |
pixel_tracker / session |
|
_shopify_y / _y |
Shopify analytics: Used for measuring and tracking visitor activity on the store. |
Shopify (Canada) |
http_cookie / ~12 months |
|
_shopify_s / _s |
Shopify analytics: Short-duration session analytics cookie. |
Shopify (Canada) |
http_cookie / 29 minutes |
|
rmc_uid / rmc_logged_in_at / rmc_carttoken |
Session and user tracking cookies used by the Reconvert or related Shopify upsell/thank-you page app. |
Shopify (Canada) |
http_cookie / session |
|
proof-factor-user-* / pf_ptc_* / pf_stc |
A set of cookies and local storage items set by the Proof Factor (now One) social proof and conversion optimization app. Used to track user sessions and display activity notifications (e.g., recent purchases). These cookies expire within 4 minutes to ~13 months depending on the specific cookie. |
Shopify (Canada) |
http_cookie / 4 min – 13 months |
|
x-proof-factor-user-* |
Local storage item for Proof Factor app user session data. |
Shopify (Canada) |
html_local_storage / persistent |
|
is_eu |
Session storage item that detects whether the visitor is located in the European Union to serve region-appropriate content. |
Shopify (Canada) |
html_session_storage / session |
Â
Advertising Cookies (Non-essential — can be rejected; opt-out available via Cookie Consent Manager or GPC signal)
|
Cookie Name |
Purpose |
Provider |
Type / Expires |
|
_fbp |
Facebook/Meta tracking pixel: Used to identify visitors for personalized advertising and to measure the effectiveness of Facebook ad campaigns. |
Meta (Canada domain) |
http_cookie / ~3 months |
|
fr |
Facebook/Meta: Collects a unique browser and user ID for targeted advertising on Facebook and Instagram. |
facebook.com (Ireland) |
server_cookie / ~3 months |
|
ga-audiences |
Google AdWords/Ads: Used to re-engage visitors likely to convert based on online behavior across websites. |
Google (USA) |
pixel_tracker / session |
|
td |
Google Tag Manager / UnrulyX: Pixel tracker used to deliver targeted advertisements based on browsing activity. |
googletagmanager.com (USA) |
pixel_tracker / session |
|
IDE |
Google DoubleClick: Used to measure the conversion rate of ads shown to users. Expires in approximately 1.5 years. |
doubleclick.net (USA) |
server_cookie / ~2 years |
|
test_cookie |
Google DoubleClick: A short-lived session cookie used to check whether the user's browser supports cookies before serving ads. |
doubleclick.net (USA) |
server_cookie / 15 minutes |
|
_shopify_sa_p / _shopify_sa_t |
Shopify analytics relating to marketing and referrals, used to track where visitors came from before purchasing. |
Shopify (Canada) |
http_cookie / 29 minutes |
|
_landing_page / _orig_referrer |
Shopify: Tracks the landing page and original referrer URL to attribute traffic sources for marketing purposes. |
Shopify (Canada) |
http_cookie / 13 days |
|
v3 (Pinterest) |
Pinterest tracking pixel: Used to measure ad campaign performance and build audiences on Pinterest. |
ct.pinterest.com (USA) |
pixel_tracker / session |
|
_pinterest_ct_ua |
Pinterest conversion tracking: Used to track user behavior for Pinterest advertising attribution. |
ct.pinterest.com (Sweden) |
server_cookie / ~12 months |
|
_pin_unauth |
Pinterest: Used to track unauthenticated visitors for Pinterest advertising and analytics. |
Shopify (Canada) |
http_cookie / ~12 months |
|
821074842 (Google) |
Google advertising pixel tracker used for conversion tracking and audience targeting. |
google.com (USA) |
pixel_tracker / session |
Â
Unclassified / Under Review Cookies (Being actively classified)
|
Cookie Name |
Purpose |
Provider |
Type / Expires |
|
rmc_uid / rmc_carttoken / rmc_logged_in_at |
Associated with the Reconvert post-purchase upsell app. Classification and full data use under review. |
Shopify (Canada) |
http_cookie / session |
|
spurit-global-tab-id |
Session storage item for SpurIT app tab management. Classification under review. |
Shopify (Canada) |
html_session_storage / session |
|
_session_id (one.store) |
Session ID for One Store app. We are in the process of confirming the full scope of data processed. |
one.store (USA) |
server_cookie / session |
Â
Â
5. WHAT ABOUT OTHER TRACKING TECHNOLOGIES?
Web Beacons / Tracking Pixels
We may use other similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our Website or opened an email containing them. This allows us to monitor traffic patterns, deliver or communicate with cookies, understand whether you came to our website from an online advertisement, improve site performance, and measure the success of email marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and declining cookies will impair their functioning.
Note: Our Website currently uses tracking pixels from Google, Facebook/Meta, and Pinterest for advertising and conversion measurement purposes. These pixels are categorized as advertising cookies above and are subject to opt-out via our Cookie Consent Manager or via a GPC signal.
Â
Flash Cookies / Local Shared Objects (LSOs)
Our Website may use so-called "Flash Cookies" (also known as Local Shared Objects or "LSOs") to collect and store information about your use of our services, for fraud prevention, and for other site operations.
If you do not want Flash Cookies stored on your computer, you can adjust the settings of your Flash player to block Flash Cookie storage using the tools in the Website Storage Settings Panel. You can also control Flash Cookies by going to the Global Storage Settings Panel at https://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager07.html.
Please note that setting the Flash Player to restrict Flash Cookies may reduce or impede the functionality of some Flash applications.
Â
6. DO YOU SERVE TARGETED ADVERTISING?
Third parties may serve cookies on your computer or mobile device to serve advertising through our Website. These companies may use information about your visits to this and other websites in order to provide relevant advertisements about goods and services that you may be interested in. They may also employ technology to measure the effectiveness of advertisements using cookies or web beacons.
The information collected through this process does not enable us or them to identify your name, contact details, or other details that directly identify you unless you choose to provide these.
Â
Your Right to Opt Out of Targeted Advertising: You have the right to opt out of the use of your personal data for targeted (cross-context behavioral) advertising. You may exercise this right through:
•      Our Cookie Consent Manager (accessible via the cookie banner on our Website)
•      A Global Privacy Control (GPC) or other Universal Opt-Out Mechanism (UOOM) signal sent by your browser
•      Visiting https://aspenkaynaturals.com/pages/contact-us and submitting a "Do Not Sell or Share" request
•      The advertising network opt-out links listed in Section 3 above
Â
When we receive a valid opt-out request through any of these methods, we will stop sharing your personal data with advertising partners for targeting purposes within 15 days of receipt, consistent with applicable state law requirements.
Â
7. STATE-SPECIFIC DISCLOSURES
California (CCPA/CPRA)
Under the CCPA/CPRA, the use of advertising cookies and tracking pixels that share your data with third-party advertisers may constitute the "sale" or "sharing" of personal information. You have the right to opt out of such sale or sharing at any time. See Section 3 above for opt-out methods.
We honor Global Privacy Control (GPC) signals as a valid opt-out mechanism. Per the CPPA's Enforcement Advisory No. 2024-02, our consent interface is designed to provide symmetry of choice. When your GPC signal is honored, we will display a confirmation notice on our Website.
Beginning January 1, 2026, our use of cookies for cross-context behavioral advertising is subject to a CCPA risk assessment obligation. We are conducting and documenting risk assessments in compliance with the CPPA's 2025 regulations.
Â
Colorado, Connecticut, Delaware, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas
Residents of these states have the right to opt out of the sale of personal data and targeted advertising via Universal Opt-Out Mechanisms (UOOMs), including GPC. We honor these signals as legally binding opt-out requests as of the effective date of each applicable state law.
Â
Minnesota (effective July 31, 2025) and Maryland (effective October 1, 2025)
Residents of Minnesota and Maryland have the right to opt out of the sale of personal data and targeted advertising via UOOMs. Maryland law additionally restricts the processing of sensitive personal data (including health data and precise geolocation) for targeted advertising or sale; we do not engage in such processing.
Â
8. HOW OFTEN WILL YOU UPDATE THIS COOKIE POLICY?
We may update this Cookie Policy from time to time in order to reflect changes to the cookies we use, changes in applicable law, or for other operational, legal, or regulatory reasons. Please revisit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.
The date at the top of this Cookie Policy indicates when it was last updated. If we make material changes, we will notify you via a notice on our Website or by email (if you have an account).
Â
9. WHERE CAN I GET FURTHER INFORMATION?
If you have any questions about our use of cookies or other technologies, please contact us at:
Â
Aspen Kay Natural, Inc.
Attn: Data Protection Officer — Harmony Keltner
21937 US Hwy 19 N.
Clearwater, FL 33765
United States
Email: info@aspenkaynaturals.com
Phone: 818-312-7867
Contact Form: https://aspenkaynaturals.com/pages/contact-us
Â
This Cookie Policy was updated on April 5, 2026 to address: Global Privacy Control (GPC) and Universal Opt-Out Mechanism (UOOM) requirements under California, Colorado, Connecticut, and other state laws; CPPA Enforcement Advisory No. 2024-02 symmetry-of-choice requirements; expanded cookie inventory with purposes clarified for all previously unclassified cookies; state-specific advertising opt-out rights; and updated contact information. Prior version was dated June 9, 2023.