Breeze Cookie Policy
Policy Date: August 2026
About this policy. This Cookie Policy explains what cookies and similar technologies are, which ones we use on the Breeze website and mobile app, why we use them, and how you can manage your preferences. It forms part of our Privacy Policy at breezesim.com/policies/privacy-policy.
Who we are. Breezesim Limited, trading as Breeze (company number 16221665), First Floor, 18-19 South Bar Street, Banbury, OX16 9AF. Questions: dataprivacy@breezesim.com.
Last updated: August 2026.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, remember your preferences, and collect information about how you use the site. Similar technologies — including pixels, web beacons, local storage, session storage, and software development kits (SDKs) in our mobile app — work in comparable ways. Some are set by us (first-party); others by third-party services we use.
2. How we use cookies and your legal rights
Strictly necessary cookies are set on the basis of our legitimate interests in operating a functional and secure service and do not require your consent. They cannot be switched off without breaking the site.
All other cookies — analytics, marketing, and functional — are set only with your freely given, specific, informed and unambiguous consent under PECR Regulation 6. You can manage preferences at any time via the 'Cookie preferences' link in our website footer or via your mobile app settings.
3. Cookies we use
3.1 Strictly necessary
These cookies are essential and cannot be disabled.
| Cookie name | Set by | Purpose | Type | Duration | Data | Consent? |
|---|---|---|---|---|---|---|
_shopify_essential | Shopify | Session management, cart, account state | Session | 1 year | Session identifier | No |
cart | Shopify | Stores shopping cart contents | Persistent | 2 weeks | Cart contents | No |
secure_customer_sig | Shopify | Authenticates signed-in customers | Persistent | 20 years | Encrypted customer token | No |
localization | Shopify | Remembers language/region setting | Persistent | 1 year | Language/region | No |
cart_currency | Shopify | Stores selected currency | Persistent | 14 days | Currency code | No |
_tracking_consent | Shopify | Stores visitor cookie consent preferences | Persistent | 1 year | Consent status | No — consent management |
3.2 Analytics and performance
These cookies help us understand how visitors use our site and app so we can improve them.
| Cookie / technology | Set by | Purpose | Type | Duration | Data | Consent? |
|---|---|---|---|---|---|---|
_ga, _ga_* | Google Analytics (GA4) | Distinguishes unique users; stores session state. IP anonymisation enabled. Retention: 14 months. | Persistent | 14 months | Anonymous client ID, session state | Yes |
PostHog (ph_[token]) | PostHog — EU region | Product analytics and session replay (session replay off on app; autocapture off). Free plan: 1 year event retention, 30 days session recordings. | Persistent | 1 year (events); 30 days (recordings) | Anonymous user ID, behaviour data | Yes |
Microsoft Clarity (_clck, _clsk, CLID, ANONCHK, MR, MUID, SM) | Microsoft — USA (IDTA / SCCs) | Session recording, heatmaps, and user behaviour analytics. Records mouse movements, clicks and scrolls to help us understand how visitors use the site. No personally identifiable information is collected. Retention: 13 months. | Persistent | Up to 13 months | Analytics | Yes |
Hotjar (_hj*) | Hotjar | Heatmaps, session recordings, user behaviour analysis | Persistent | Up to 1 year | Session data, heatmap data | Yes |
| Sentry | Sentry (BFF layer) | Error monitoring and crash reporting on backend-for-frontend layer | Server-side | Per Sentry config | Error events, stack traces | Server-side — no browser cookie |
3.3 Marketing and advertising
These cookies are used to show relevant advertising and measure campaign effectiveness.
| Cookie / technology | Set by | Purpose | Type | Duration | Data | Consent? |
|---|---|---|---|---|---|---|
| Meta Pixel | Meta | Conversion tracking and retargeting on Meta platforms | Persistent | 3 months | Browser ID, page views, events | Yes |
| Google Ads | Conversion tracking for Google Ads campaigns | Persistent | 3 months | Click and conversion data | Yes | |
| Google Tag Manager | Tag management container — loads other marketing tags | Container | N/A | Manages other tags | Yes | |
| Google Merchant Center | Product listing and shopping feed | Persistent | Per Google config | Product and conversion data | Yes | |
| AWIN | AWIN | Affiliate network tracking | Persistent | 30 days | Referral and conversion data | Yes |
UpPromote / scaaf_aid, scaaf_hc | UpPromote / Secomapp | Affiliate programme tracking — also set in localStorage | Session + localStorage | Session / persistent | Affiliate referral ID | Yes |
| Klaviyo | Klaviyo | Email marketing pixel and behaviour tracking | Persistent | Per Klaviyo config | Email engagement, behaviour | Yes |
| Shoplift | Shoplift | A/B testing and conversion optimisation | Persistent | Per Shoplift config | Test variant, session data | Yes |
Gameball / gb-refcode | Gameball | Referral programme tracking | Persistent | Per Gameball config | Referral code | Yes |
referrerbanner, chatbot | First-party (theme) | Marketing attribution tracking — referrerbanner (30 days), chatbot (30 days, cleared on add to cart) | Persistent | 30 days | Referral source | Yes |
3.4 Functional / preference
| Cookie / technology | Set by | Purpose | Type | Duration | Data | Consent? |
|---|---|---|---|---|---|---|
_tracking_consent | Shopify | Stores cookie consent preferences | Persistent | 1 year | Consent status per category | No — consent management |
localization | Shopify | Language and region preference | Persistent | 1 year | Language/region setting | No — functional essential |
3.5 Local storage and session storage
In addition to cookies, we use browser local storage and session storage for the following:
| Key | Set by | Purpose | Storage type | Consent? |
|---|---|---|---|---|
scaaf_aid, scaaf_hc, scaaf_received | UpPromote | Affiliate tracking identifiers | localStorage | Yes |
utm_source, utm_medium, utm_campaign, origin | First-party | Campaign attribution tracking | sessionStorage | Yes |
4. Our technology platform and key third parties
Our website runs on Shopify. Shopify sets strictly necessary cookies to operate the store and manages our consent banner. Shopify processes data under its own Privacy Policy.
Google Analytics (GA4). IP anonymisation is automatically enabled. Data retention is set to 14 months. Data processed in the US under the IDTA.
PostHog. Analytics and session replay (session replay disabled in app; autocapture disabled). EU region — no international transfer. Currently on free plan: events retained 1 year, session recordings 30 days.
Meta Pixel. Conversion tracking and retargeting. US-based — IDTA in place.
Hotjar. Heatmaps and session recording.
Sentry. Backend error monitoring (BFF layer). Server-side only — no browser cookie. US-based — IDTA in place.
Firebase (Auth, Cloud Messaging). Authentication and push notifications in the mobile app. US-based — IDTA in place.
5. Cookies in our mobile app
Our mobile app does not use browser cookies. Instead it uses SDKs and device identifiers. The following are in use:
- PostHog — product analytics. Autocapture and session replay both disabled. EU region.
- Firebase Auth — user authentication.
- Firebase Cloud Messaging — push notifications.
- Google Sign-In / Apple Authentication — third-party sign-in.
- Shopify Checkout Sheet Kit — in-app checkout.
- Adyen — payment processing (BFF layer).
You can manage analytics preferences in the app at: Profile > Notification preferences > Privacy > 'Share usage data' toggle. This is set to off by default and you are asked during onboarding.
6. How to manage your preferences
| Method | How | What it controls |
|---|---|---|
| Website cookie banner | Click 'Cookie preferences' in the footer of breezesim.com at any time | Analytics, marketing and functional cookies |
| Browser settings | Block or delete cookies via your browser privacy settings | All cookies — blocking strictly necessary cookies may prevent the site working correctly |
| Google Analytics opt-out | Install the GA opt-out add-on at tools.google.com/dlpage/gaoptout | Google Analytics specifically |
| Mobile app — Share usage data toggle | Profile > Notification preferences > Privacy > 'Share usage data' | App analytics (PostHog) |
| Mobile app — device settings | iOS: Settings > Privacy & Security > Tracking. Android: Settings > Privacy > Ads | Device-level advertising identifiers |
7. Changes to this policy
We update this policy whenever we add or remove cookies or change how we use them. We will not introduce new non-essential cookies without updating this policy and, where required, seeking fresh consent.
8. Contact us
- Name: Craig Kingham, Data Protection Officer
- Email: dataprivacy@breezesim.com
- Post: Data Protection Officer, Breezesim Limited, First Floor, 18-19 South Bar Street, Banbury, OX16 9AF
You also have the right to complain to the ICO at ico.org.uk or 0303 123 1113.
