Cookie policy
Last updated 28 August 2026
Short, because there is not much to describe. Wrapt sets no analytics, advertising or tracking cookies anywhere — not on this website, not in the Shopify admin, and not on your storefront.
This website
The landing page, the FAQ and the policy pages set no cookies at all and load no third-party scripts. There is nothing here to consent to, which is why you are not being asked.
Installing the app
When you submit your shop domain to install Wrapt, Shopify’s OAuth flow runs. That flow sets short-lived, strictly necessary cookies, managed by Shopify’s own app library rather than by us:
| Cookie | Purpose | Lifetime |
|---|---|---|
shopify_app_state | Carries the OAuth state parameter, which is what prevents an attacker completing an authorisation you started | Minutes — cleared once the install completes |
shopify_app_session | Identifies the session during the install handshake for non-embedded steps | The browser session |
These are strictly necessary: without them the installation cannot be completed securely. Under the ePrivacy Directive and equivalent rules they do not require consent.
The embedded app in Shopify admin
Once installed, the Wrapt admin runs inside Shopify’s admin and authenticates with App Bridge session tokens rather than cookies. Your browser may store the Shopify admin’s own cookies; those are Shopify’s and are covered by Shopify’s policies.
Your storefront
The gift wrap control adds no cookies and no storage to your storefront, and makes no request to Wrapt’s servers. It reads the wrap options that Shopify has already rendered into the page, and talks only to Shopify’s own cart endpoints.
This matters for your own cookie banner: Wrapt does not add a category you have to declare, and adding it does not change your consent obligations.
Controlling cookies
You can block or delete cookies in your browser settings. Blocking the two listed above will prevent the app from installing, since the install cannot be completed securely without them.
Questions
See the privacy policy for what is stored on our side, or write to [email protected].