Last updated: November 13, 2026, America/New_York. This page is a plain-English description of cookies on https://store.hocl.com/. It is not legal advice.
This Cookie Policy explains how HOCL LLC (“we”, “us”) uses cookies and similar technologies on the HOCL Store at https://store.hocl.com/. It should be read with our Privacy Policy.
Questions: service@hocl.com.
On this page: What cookies are · How we ask for your choice · The categories we use · Cookies and tools we have observed · Checkout, payment, and fulfillment tools · How to change or withdraw your consent · Changes to this Cookie Policy · Privacy Policy
What cookies are
Cookies are small text files stored on your device. The store also uses similar technologies, such as pixels and scripts, that can store or read information on your device or send information to another company. In this policy we call all of these “cookies” unless we need to be more specific.
How we ask for your choice
On your first visit we show a cookie banner. You can Accept All Cookies, Reject all, or open Settings and choose Yes or No for Functional, Analytics, and Targeting; Advertising. Essential cookies are always on, because the store cannot work without them. Closing the banner is not treated as acceptance.
You can change your mind at any time with the Cookie preferences link in the footer. That control reopens the same BigCommerce consent manager. After you have already made a choice, “Manage Website Data Collection Preferences” also reopens those settings.
We remember your choice in first-party cookies on store.hocl.com (bc_consent and tracking-preferences).
The categories we use
These are the BigCommerce consent categories:
- Essential — needed for the store to work, for security, and to remember your cookie choice and basic shopper settings such as currency. You cannot switch these off in the banner.
- Functional — optional features such as live chat (Tawk.to) and product reviews (Stamped). Some of these features will not work if you say no.
- Analytics — help us understand how the store is used. Google Analytics 4 is in this group.
- Targeting; Advertising — used for advertising and measurement, including Google Ads, the Meta pixel, and Microsoft Advertising / Bing.
Cookies and tools we have observed on the store
The lists below come from a fresh-browser review of the home page, the Eco One page and the Hypo 7.5 product page on 12 Nov 2026. Names, domains and roles are what we actually saw, or a cautious description of a tool we saw loading. Lifetimes were not recorded. This list will go out of date if tools are added or removed, and should be reviewed when that happens.
Essential and security (set before any banner choice)
| Name | Domain | Role |
|---|---|---|
SHOP_SESSION_TOKEN |
store.hocl.com | Shopper session, so your cart and browsing stay consistent |
SF-CSRF-TOKEN |
store.hocl.com | Security (CSRF protection) |
XSRF-TOKEN |
store.hocl.com | Security (CSRF protection) |
SHOP_RENDER_VERIFICATION_TOKEN |
store.hocl.com | Platform render / bot verification |
Shopper-Pref |
store.hocl.com | Basic shopper preferences (for example currency) and a consent flag used by the platform |
Shopper-Pref-v2 |
store.hocl.com | Same purpose, newer format |
__cf_bm |
.store.hocl.com and .bigcommerce.com | Cloudflare bot management |
cf_clearance |
.hocl.com | Cloudflare challenge clearance |
__cf_ob |
store.hocl.com | Cloudflare-related, first-party |
After you make a choice, the store also sets:
| Name | Domain | Role |
|---|---|---|
bc_consent |
store.hocl.com | Your allow / deny list for Functional (2), Analytics (3) and Targeting; Advertising (4) |
tracking-preferences |
.store.hocl.com | A second copy of your category choices, used by the consent manager |
Analytics (should run only after you accept Analytics)
Google Analytics 4, Measurement ID G-6VZBC8TBCS, is the store’s analytics tool. On 12 Nov 2026 the built-in GA4 tag still loaded, and still sent a google-analytics.com/g/collect request, before any banner choice and after Reject all. Those requests were sent in Google Consent Mode with storage denied (gcs=G100, npa=1). The usual Google Analytics cookies _ga and _gid were not seen, including after Accept all in that test. This pre-consent request is a known gap; see the change list that accompanies this draft. Until it is fixed, this policy should not claim that Analytics requests never leave the browser before consent.
Targeting; Advertising (should run only after you accept that category)
On 12 Nov 2026 these ran after Accept All Cookies, and did not run after Reject all:
| Name | Domain | Tool / role |
|---|---|---|
_fbp |
.hocl.com | Meta pixel (875350513117393) |
_uetsid |
.hocl.com | Microsoft Advertising / Bing UET (295031270), session |
_uetvid |
.hocl.com | Microsoft Advertising / Bing UET, visitor |
MUID |
.bing.com | Microsoft / Bing identifier |
MR |
.bat.bing.com | Microsoft Advertising related |
Google Ads (AW-926384876) also loaded after Accept All Cookies (gtag/js and a pagead2.googlesyndication.com/ccm/collect page-view). No separate Google Ads cookie name was recorded in that test.
Functional (should run only after you accept Functional)
- Tawk.to live chat (property
6af32bea321e133c42f3f886, widget1k72u73pe). The script is already held until Functional consent. In the 12 Nov 2026 test it requestedembed.tawk.toafter Accept all. No Tawk cookie name was recorded in that short window. - Stamped reviews widget (store id
157781). It is in the Functional category, so review stars and widgets load only after you accept Functional cookies. No Stamped cookie was seen.
YouTube (product video embeds)
The Eco One product page uses a self-hosted video on hocl.com and, in the 12 Nov 2026 test, did not set YouTube cookies.
The Hypo 7.5 product page still embeds https://www.youtube.com/embed/79t9MNXJy5A. On a first visit, before any banner click, the following cookies were set on .youtube.com: YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-ROLLOUT_TOKEN, __Secure-YNID. Related advertising requests also went to DoubleClick. This is a known gap. Until the embed is replaced or gated, visiting that product page can set YouTube cookies before you make a choice.
Checkout, payment, and fulfillment tools
The tools below are used for checkout, payment, form security, or order fulfillment. BigCommerce checkout, Google reCAPTCHA, Tawk.to, Stamped and Cloudflare were seen on the live store (reviewed 12 Nov 2026 and again in a read-only check on 13 Nov 2026, America/New_York). Stripe is used to take payment at checkout. ShipStation is our fulfillment and shipping tool. Checkout-only cookie names were not recorded, because checkout did not load in those reviews.
- BigCommerce checkout — the store checkout. The checkout script
https://checkout-sdk.bigcommerce.com/v1/loader.jswas seen on the cart and other store pages. - Stripe — used to take payment at checkout. Cookie names set only at checkout were not recorded.
- Google reCAPTCHA — the script
https://www.google.com/recaptcha/api.jswas seen on the login, create-account and contact-us pages, and on the Eco One and Hypo 7.5 product pages. A visible reCAPTCHA widget was on the create-account and contact-us forms. It is not confirmed whether reCAPTCHA also appears at checkout. - Tawk.to and Stamped — described in the Functional section above.
- Cloudflare — security and content delivery, including the
__cf_bmcookie listed in the Essential table above. - ShipStation — our fulfillment and shipping tool. It was not observed as a storefront cookie in this review.
Tools we looked for and did not see on the public storefront
No storefront requests were seen to Klaviyo, TikTok or Hotjar in this review. If they are used only in the back office, they are not listed as storefront cookies here.
How to change or withdraw your consent
- Use Cookie preferences in the footer, or “Manage Website Data Collection Preferences” after you have already made a choice. That reopens the banner settings.
- You can also block or delete cookies in your browser settings. Essential cookies may then be missing and parts of the store, including checkout, may not work properly.
- For marketing emails, use the unsubscribe link in the email or write to service@hocl.com.
Withdrawing consent does not affect the lawfulness of our use of cookies before you withdrew it.
Changes to this Cookie Policy
We may update this page when our tools or the law change. The date at the top will be revised when we do. The current version is the one published at https://store.hocl.com/cookie-policy/.