Cookie policy

Necessary

Keep the cart, checkout, payments and your account working, protect the shop against fraud and bots, and remember your cookie choice.

Airwallex

Purpose	Shows the Airwallex card and wallet payment fields at checkout and processes your payment.
Browser storage	AIR_ANALYTICS_DEVICE_ID AIR_ANALYTICS_SESSION_ID awxCheckoutUser awx_tracker test cardPaymentWithOcc googlePayDirectCheckout
Connects to	checkout-demo.airwallex.com components-demo.airwallex.com o11y-demo.airwallex.com static-demo.airwallex.com checkout.airwallex.com

Airwallex

Purpose	Lets Airwallex screen your payment for fraud, with the device and captcha checks its security frame loads.
Cookies
Cookie	AWX_RISK_ID
Domain	.airwallex.com
Lifetime	3 years
Purpose	Identifies your device so Airwallex can screen payments for fraud.
Cookie	AWX_RISK_ID
Domain	this site
Lifetime	3 years
Purpose	Identifies your device so Airwallex can screen payments for fraud.
Cookie	AWX_RISK_SID
Domain	.airwallex.com
Lifetime	4 hours
Purpose	Identifies one payment session so Airwallex can screen it for fraud.
Cookie	AWX_RISK_SID
Domain	this site
Lifetime	4 hours
Purpose	Identifies one payment session so Airwallex can screen it for fraud.
Cookie	__AWX_TEMP_F_D__
Domain	.airwallex.com
Lifetime	3 years
Purpose	Holds a device fingerprint that Airwallex uses to screen payments for fraud.
Cookie	__AWX_TEMP_F_D__
Domain	this site
Lifetime	3 years
Purpose	Holds a device fingerprint that Airwallex uses to screen payments for fraud.
Cookie	cookietest
Domain	.airwallex.com
Lifetime	0 seconds
Purpose	Checks that your browser accepts cookies and is deleted right after it is written.
Cookie	cookietest
Domain	this site
Lifetime	0 seconds
Purpose	Checks that your browser accepts cookies and is deleted right after it is written.
Cookie	forterToken
Domain	varies
Lifetime	400 days
Purpose	Lets Forter, the fraud screening partner of Airwallex, recognize your device while you pay.
Browser storage	__awx__device_features__ __AWX_TEMP_F_D__ awx_hasPermissionToOperateLocalStorage AWX_RISK_ID AWX_RISK_SID awx_visitor_id_token forterToken rc::a rc::c
Connects to	bws.sandbox.airwallex.com static.sandbox.airwallex.com aac5fb818cb3.cdn4.forter.com signifyd.com *.signifyd.com online-metrix.net *.online-metrix.net www.recaptcha.net turing.captcha.gtimg.com turing.captcha.qcloud.com 1.1.1.1 db7q4jg5rkhk8.cloudfront.net dlthst9q2beh8.cloudfront.net

Cloudflare

Purpose	Lets Cloudflare tell real visitors from bots, on this site and in the payment and captcha checks it protects.
Cookies
Cookie	__cf_bm
Domain	varies
Lifetime	30 minutes
Purpose	Holds the Cloudflare bot check result for your visit. Scripts on the page cannot read it.
Cookie	cf_clearance
Domain	varies
Lifetime	12 months
Purpose	Records that your browser passed a Cloudflare security check. Scripts on the page cannot read it.
Cookie	_cfuvid
Domain	varies
Lifetime	session
Purpose	Lets Cloudflare apply fair rate limits to visitors who share an internet address. Scripts on the page cannot read it.
Connects to	challenges.cloudflare.com

Surevia

Purpose	Stores your cookie choices for this site.
Cookies
Cookie	surevia_consent_id
Domain	this site
Lifetime	12 months
Purpose	Keeps the reference to your recorded cookie choice. Scripts on the page cannot read it.
Cookie	surevia_consent
Domain	this site
Lifetime	12 months
Purpose	Keeps the cookie groups you allowed, so the site and its tags follow your choice.
Browser storage	surevia_consent_sync

Magento

Purpose	Keeps your shopping session, your cart and the page cache working.
Cookies
Cookie	PHPSESSID
Domain	this site
Lifetime	1000 hours
Purpose	Identifies your session on our server. Scripts on the page cannot read it.
Cookie	X-Magento-Vary
Domain	this site
Lifetime	1 hour
Purpose	Makes sure you get the right cached version of a page. Scripts on the page cannot read it.
Cookie	private_content_version
Domain	this site
Lifetime	10 years
Purpose	Tells the page cache when your personal content has changed.
Cookie	form_key
Domain	this site
Lifetime	1 hour
Purpose	Protects forms against requests sent from other sites.

ScandiPWA

Purpose	Keeps the storefront app's sign-in, cart and settings in your browser.
Browser storage	auth_token cart_id cart_totals config customer LINKED_PRODUCTS wishlist_products cookie_popup_* WINDOW_ID

Stripe

Purpose	Takes card and wallet payments at checkout and screens them for fraud, including the hCaptcha check Stripe Radar runs and the HUMAN bot check Stripe.js loads.
Cookies
Cookie	__stripe_mid
Domain	this site
Lifetime	12 months
Purpose	Recognizes your browser across payments to help prevent fraud.
Cookie	__stripe_sid
Domain	this site
Lifetime	30 minutes
Purpose	Groups the requests of one payment session to help prevent fraud.
Cookie	m
Domain	.stripe.com
Lifetime	2 years
Purpose	A Stripe device signal that helps prevent payment fraud. Scripts on the page cannot read it.
Cookie	__cflb
Domain	api2.hcaptcha.com
Lifetime	1 day
Purpose	Keeps the hCaptcha check Stripe runs on the same server while it loads. Scripts on the page cannot read it.
Cookie	_pxvid
Domain	.stripecdn.com
Lifetime	12 months
Purpose	A HUMAN browser id that tells real customers from bots during a Stripe payment.
Cookie	_px3
Domain	.stripecdn.com
Lifetime	6 minutes
Purpose	Keeps the HUMAN bot check session for a Stripe payment, with no personal data in it.
Cookie	pxcts
Domain	.stripecdn.com
Lifetime	0 seconds
Purpose	Links the browser tabs of one HUMAN bot check session during a Stripe payment.
Cookie	_pxde
Domain	.stripecdn.com
Lifetime	5 days
Purpose	Carries the outcome of the HUMAN bot check for a Stripe payment.
Browser storage	__storage_test__ muffins _ab _mf 1 id PXLjsYPz3T_px-ff PXLjsYPz3T_px_hvd PXLjsYPz3T_px_nfsp PXLjsYPz3T_px_c_p_PXLjsYPz3T pxsid
Connects to	js.stripe.com api.stripe.com m.stripe.com m.stripe.network r.stripe.com b.stripecdn.com merchant-ui-api.stripe.com hcaptcha.com api.hcaptcha.com newassets.hcaptcha.com sentry.hcaptcha.com <id>.w.hcaptcha.com api2.hcaptcha.com client.px-cloud.net ift.px-cloud.net collector-pxljsypz3t.px-cloud.net

STD Test Kits

Purpose	Keeps the storefront's app files in your browser, so pages load fast and keep working after we release an update.
Browser storage	https://*/service-worker.js chunks documents graphql fonts images images-v2 workbox-precache-v2-* workbox-expiration

STD Test Kits

Purpose

Keeps you signed in across tabs and remembers your cart, your checkout, your order pages and forms you have not finished.

Browser storage

auth_epoch auth_epoch_ended pending_guest_cart_merge payment_submission_claim:<cart>@<owner> cart_merge_in_flight:<cart>:<owner> omegades-cart-commit airwallex_express_unresolved_payment stripe_cart_payment_in_progress CHECKOUT_SHIPPING_FIELDS PAYMENT_TOTALS ORDER_ID order_sheet_<order> manage_address_token_<order> reward_coupon_token_<order> post_login_redirect helpdesk_login_return_url surevia_chunk_recovery surevia_entry_recovery

Apple, Google and Revolut

Purpose	Checks whether Apple Pay, Google Pay or Revolut Pay can be offered, and runs the payment when you choose one.
Cookies
Cookie	prod_pv_pod12_paymentservices_ext_session
Domain	.smp-paymentservices.apple.com
Lifetime	2 minutes
Purpose	Keeps the Apple Pay session of your payment. Scripts on the page cannot read it.
Cookie	smp_paymentservices
Domain	.smp-paymentservices.apple.com
Lifetime	1 day
Purpose	Routes your Apple Pay payment to the right Apple service. Scripts on the page cannot read it.
Browser storage	allowed_payment_methods.* pf.keys
Connects to	applepay.cdn-apple.com smp-paymentservices.apple.com pay.google.com play.google.com www.gstatic.com csp.withgoogle.com revolut.com *.revolut.com

Set by our payment provider inside its secure payment frame, outside the shop's control

Airwallex, our payment provider, shows Google Pay and its card fields in a secure frame on product pages, in the cart and at checkout. That frame loads the services below whatever you choose in your cookie settings. The shop does not control them and cannot switch them off. The provider decides which cookies and browser storage they use and how long these last.

Forter

Purpose	Screens payments for fraud for Airwallex by checking your device, and sets the forterSId cookie on its own domain with a lifetime set by the provider.
Connects to	cdn0.forter.com cdn3.forter.com aac5fb818cb3.cdn4.forter.com cdn6.forter.com <id>-aac5fb818cb3.cdn.forter.com

Google Analytics, Airwallex's account

Purpose	Airwallex's own Google Analytics account (G-L62VPN96LW) measures how people use its Google Pay button, and the shop cannot see this data.

reCAPTCHA by Google

Purpose	Checks for Airwallex that a real person, not an automated program, is making the payment.
Cookies
Cookie	_GRECAPTCHA
Domain	www.recaptcha.net
Lifetime	180 days
Purpose	Lets Google reCAPTCHA, which Airwallex runs in its payment frame, tell a real person from an automated program. Scripts on the page cannot read it.
Connects to	www.recaptcha.net

Statsig

Purpose	Runs feature flags and usage measurement for Airwallex, which decide which version of the payment frame you see and record how it is used.
Browser storage	statsig.session_id.<id> statsig.stable_id.<id> statsig.last_modified_time.evaluations statsig.cached.evaluations.<id>
Connects to	featureassets.org prodregistryv2.org statsigapi.net

Captcha by Tencent Cloud

Purpose	Gives Airwallex a second bot check, which it can show to confirm that a real person is making the payment.
Connects to	turing.captcha.qcloud.com turing.captcha.gtimg.com

Preferences

Remember choices you make on the site, so you don't have to make them again.

Nothing in this category is in use.

Analytics

Show us how the shop is used through Google Analytics, so we can improve it.

Google

Purpose	Google Tag Manager and Google Analytics measure how visitors use the shop, so we can improve it.
Cookies
Cookie	_ga
Domain	this site
Lifetime	2 years
Purpose	Tells visitors apart for Google Analytics.
Cookie	_ga_*
Domain	this site
Lifetime	2 years
Purpose	Keeps the state of your visit for Google Analytics.
Cookie	FPLC
Domain	this site
Lifetime	20 hours
Purpose	Links the first-party Google Analytics visitor ID across our domains.
Cookie	FPGSID
Domain	this site
Lifetime	30 minutes
Purpose	Groups the requests of one visit on our own tagging host.
Cookie	_dcid
Domain	this site
Lifetime	2 years
Purpose	Keeps a visitor ID for the measurement our own tagging host receives.
Cookie	FPIDP
Domain	this site
Lifetime	2 years
Purpose	Records whether our own tagging host may use its first-party visitor ID.
Browser storage	gtm_pushed_purchase gtm_pushed_add_payment_info lastPLPUrl timestampOnPageLoad timestampBeforePageReload urlBeforePageReload
Connects to	www.googletagmanager.com analytics.google.com stats.g.doubleclick.net www.google.com *.google.com

Stape and Google

Purpose	Our own tagging path stdtestkits.com/surevia, run with Stape, loads the Google tag and its helper files and receives the measurement data the site sends.
Cookies
Cookie	FPID
Domain	.stdtestkits.com
Lifetime	2 years
Purpose	A first-party visitor ID set by our own tagging host, which page scripts cannot read. Scripts on the page cannot read it.
Cookie	stapeUserId
Domain	.stdtestkits.com
Lifetime	2 years
Purpose	Keeps the visitor ID the Stape loader uses, so measurement lasts when a browser shortens cookie lifetimes.
Connects to	stdtestkits.com

STD Test Kits

Purpose	Records which area of the shop you open while signed in, such as your account, cart or checkout, never which product, article or search, and keeps it on our own servers for 90 days.

Marketing

Let Google measure our ads and show them to you, and credit the ad or partner link that brought you here.

Site attribution

Purpose	Remembers which ad, campaign or partner link brought you to the shop, so it can be credited when you order.
Cookies
Cookie	affiliate_key
Domain	this site
Lifetime	12 months
Purpose	Keeps the code of the partner link you arrived through, so the partner is credited for your order.
Cookie	affiliate_source
Domain	this site
Lifetime	12 months
Purpose	Keeps how the partner referral reached you, such as a link or a coupon.
Cookie	affiliate_source_value
Domain	this site
Lifetime	12 months
Purpose	Keeps the detail that goes with the partner referral, such as the link or coupon used.
Browser storage	oad_attribution oad_sent:* mp_affiliate_code

Google

Purpose	Google advertising tags measure which of our ads lead to visits and orders, and can show you STD Test Kits ads on other sites.
Cookies
Cookie	_gcl_au
Domain	this site
Lifetime	3 months
Purpose	Lets Google Ads link your visit to our ads.
Cookie	_gcl_aw
Domain	this site
Lifetime	3 months
Purpose	Keeps the Google Ads click that brought you here.
Cookie	_gcl_dc
Domain	this site
Lifetime	3 months
Purpose	Keeps the Google Campaign Manager click that brought you here.
Cookie	FPAU
Domain	this site
Lifetime	3 months
Purpose	A Google Ads visitor ID set by our own tagging host.
Browser storage	_gcl_ls gtm_pushed_purchase enhanced_conversion_sent_<order>
Connects to	ad.doubleclick.net googleads.g.doubleclick.net

Lifetimes show the longest a cookie is set to last, and your browser may remove it sooner.