Cookie Policy

Cookies are small text files placed on your device when you visit a website. They let the site remember things between page loads — such as the items in your cart, your chosen language, or whether you are signed in.

We also use closely related technologies in the same way as cookies, including local storage, session storage, and small tracking pixels embedded in some pages. For simplicity, this policy refers to all of these as “cookies” unless we need to call out a specific kind.

We use cookies for five reasons:

• To run the store. Keep your cart between pages, hold your sign-in, and process secure checkouts.
• To remember preferences. Language, currency, and the “keep me signed in” choice.
• To understand what works. Aggregate, non-identifying analytics so we can tell which products and articles are useful.
• To measure and target advertising. See which ads led to a visit or an order, and show you our products again on other sites you visit. This is the category the “Your Privacy Choices” opt-out switches off.
• To prevent abuse. Detect bots, repeated checkout failures, and patterns associated with stolen card use.

Cookies fall into a few categories depending on how long they live and what they do:

• Strictly necessary. Required for the site to function — for example, the cart cookie, the session token, and the CSRF token used by forms. These cannot be disabled because the site won’t work without them.
• Functional. Remember your preferences (language, currency, theme). Disabling these is fine — the site still works, you just lose the personalization.
• Analytics. Aggregate usage data that helps us see which pages are useful and where the experience breaks down. We do not use these to identify individuals.
• Marketing. Used to measure which ads brought you here, to attribute orders back to a campaign, and to show you our products again on other sites and apps (remarketing). Under California and several other state privacy laws this counts as “sharing” personal information for cross-context behavioral advertising, so opting out through “Your Privacy Choices” stops these from loading at all.

Some cookies on this site are set by services we use, rather than by us directly. The short list:

• Shopify — checkout, cart, and payment session. Read more at shopify.com/legal/cookies.
• Cloudflare — bot protection and security challenges on certain requests.
• Google Analytics — aggregate site usage analytics. Loaded only if you have not opted out of analytics on this device. Google does not log or store the full IP address of your visit.
• Vercel Web Analytics — aggregate page and route view counts from our hosting provider. Cookieless: it sets no cookies and stores no identifier on your device. Loaded only if you have not opted out of analytics.
• Google Ads and DoubleClick — conversion measurement and remarketing, loaded by the same Google tag as the analytics above. These are the cookies and pixels that let us attribute an order to an ad and show you our products again elsewhere. Loaded only if you have not opted out. Google’s advertising controls are at myadcenter.google.com.
• YouTube — only when an embedded video on a product page is played. We use the privacy-enhanced embed mode.

Each third party has its own cookie policy, which we link to above. We don’t control how those services use the information they collect.

You can control cookies in two places — in our site, and in your browser.

• Our cookie banner. The banner on your first visit lets you accept all cookies or reject non-essential cookies. You can change your choice at any time from “Your Privacy Choices” in the footer of any page.
• Your browser settings. Every major browser lets you block or delete cookies. Look for “Privacy”, “Site data”, or “Cookies” in your browser settings — Chrome, Safari, Firefox, and Edge all expose these controls. Note that blocking strictly-necessary cookies will break the cart and checkout.

Some browsers offer a “Do Not Track” (DNT) setting. We also recognize and respect the Global Privacy Control (GPC) signal. When we detect a DNT or GPC signal, we disable analytics and marketing cookies for your session. Strictly necessary cookies still load, because they are required to complete an order.

We may update this cookie policy as our tools change. When we do, we update the “Last updated” date at the top of this page. For material changes — for example, adding a new analytics provider — we’ll re-display the cookie banner so you can re-confirm your choices.

For questions about cookies or to request that a specific cookie category be disabled, email info@onamaeseal.jp or use the contact form.

You may also want to read our Privacy Policy and Terms of Service.