Loadout / Privacy

Cookies information

Last updated · 2026-02

Loadout uses a small number of cookies and equivalent browser storage to keep your cart intact, keep you signed in, remember your theme choice, and process payments. We do not run third-party advertising trackers or cross-site profiling, so there is no consent banner or opt-in toggle — only the strictly-necessary and preference cookies listed below.

You can remove any of these at any time by clearing site data for loadout.co.in in your browser settings. Clearing them will sign you out and empty your cart.

Cookie	Party	Purpose	Duration	Category
cart_session_id	First-party	Persists the guest cart across pages so items remain in your bag until checkout.	14 days	Strictly necessary
oauth_state	First-party	Signed one-time value used during Shopify Customer Account sign-in to prevent CSRF and replay attacks. Cleared as soon as sign-in finishes.	5 minutes	Strictly necessary
oat_id / oat_at / oat_rt	First-party	Signed, HttpOnly session cookies that keep you signed in to your Loadout account after a successful Shopify Customer Account login. Never accessible to JavaScript.	Up to 30 days (refresh token); 1 hour (access + id tokens)	Strictly necessary
loadout_visited	First-party	Marks a returning visitor so the homepage hero switches from the full 100vh reveal to the compact 75vh state on repeat visits.	30 days	Preferences
loadout-theme	First-party (localStorage)	Remembers whether you picked light or dark mode so the theme applies instantly on your next visit.	Until you clear site storage	Preferences
shopify_*	Third-party (Shopify)	Set by Shopify when you reach the hosted Customer Account or checkout flow. Loadout does not read or control these cookies.	Session to 30 days (Shopify-managed)	Strictly necessary
razorpay_*	Third-party (Razorpay)	Set by the Razorpay payment window when you place an order. Handles the payment session between your device and Razorpay's servers.	Session (Razorpay-managed)	Strictly necessary
__cf_bm	Third-party (Cloudflare)	Cloudflare bot-management cookie set on our infrastructure to distinguish humans from automated traffic. No profiling, no ad targeting.	30 minutes rolling	Strictly necessary

cart_session_idStrictly necessary

Persists the guest cart across pages so items remain in your bag until checkout.

Party

First-party

Duration

14 days

oauth_stateStrictly necessary

Signed one-time value used during Shopify Customer Account sign-in to prevent CSRF and replay attacks. Cleared as soon as sign-in finishes.

Party

First-party

Duration

5 minutes

oat_id / oat_at / oat_rtStrictly necessary

Signed, HttpOnly session cookies that keep you signed in to your Loadout account after a successful Shopify Customer Account login. Never accessible to JavaScript.

Party

First-party

Duration

Up to 30 days (refresh token); 1 hour (access + id tokens)

loadout_visitedPreferences

Marks a returning visitor so the homepage hero switches from the full 100vh reveal to the compact 75vh state on repeat visits.

Party

First-party

Duration

30 days

loadout-themePreferences

Remembers whether you picked light or dark mode so the theme applies instantly on your next visit.

Party

First-party (localStorage)

Duration

Until you clear site storage

shopify_*Strictly necessary

Set by Shopify when you reach the hosted Customer Account or checkout flow. Loadout does not read or control these cookies.

Party

Third-party (Shopify)

Duration

Session to 30 days (Shopify-managed)

razorpay_*Strictly necessary

Set by the Razorpay payment window when you place an order. Handles the payment session between your device and Razorpay's servers.

Party

Third-party (Razorpay)

Duration

Session (Razorpay-managed)

__cf_bmStrictly necessary

Cloudflare bot-management cookie set on our infrastructure to distinguish humans from automated traffic. No profiling, no ad targeting.

Party

Third-party (Cloudflare)

Duration

30 minutes rolling

§ How to remove cookies

Every modern browser lets you clear site cookies from its privacy settings. On iOS Safari: Settings → Safari → Advanced → Website Data → search "loadout" → Delete. On Chrome desktop: DevTools → Application → Storage → Clear site data.

§ Questions

Write to support@loadout.co.in and we'll respond within one business day.