This policy explains cookies and similar technologies used by Hesient Inc., doing business as Sell&Tell, on our website and account services and by the shopper Widget on merchant stores. It supplements the Privacy Notice. Website advertising and the merchant’s shopper Widget have different purposes and data flows.
1. Cookies and Similar Technologies
Cookies are small files stored by a browser. First-party cookies are set on the site being visited; third-party cookies are associated with another provider. Browser local storage can keep information between visits, while session storage is associated with a tab. Pixels and web beacons can record page views or email engagement. A random identifier can be personal information even when it contains no name or email.
2. Website and Account Uses
- Operation and security: authentication, session management, fraud prevention, and account protection. Website providers may use device information or device fingerprinting for fraud prevention and security.
- Analytics: website and account activity, traffic, engagement, and performance measurement.
- Functionality: preferences, settings, and communications tools.
- Marketing: lead management, advertising measurement, and targeted advertising through the providers listed below. These technologies can disclose identifiers and online activity to advertising partners.
Cookie category labels do not mean that all data is anonymous or that consent requirements are the same in every situation. Account and provider cookies have lifetimes determined by the relevant implementation; browser controls and provider notices provide additional information. Details about cookies on a particular Sell&Tell page can be requested at team@sellandtell.ai.
3. Shopper Widget Storage
3.1 Random Visitor Identifier
The Widget stores a random visitor identifier in a first-party cookie and browser storage on the merchant’s store domain for one year. It distinguishes browser visits for the Widget’s operation and analysis. It does not contain the shopper’s name or email and is not obtained from the Shopify customer login.
3.2 Per-Tab Session Identifier
A session identifier is held for each browser tab to group events and interactions from that session. Session storage lasts for the tab’s browser session; browser session-restoration features can affect when that storage is cleared.
3.3 Behavior and Responses
The shopper-side Widget records dwell time, scrolling, the page zone being read, variant changes, cart actions, and the page address. Its automatic behavioral events do not include a shopper’s name, email address, or IP address, and it does not read the Shopify customer login. It uses a random visitor identifier in a first-party cookie and browser storage for one year, together with a session identifier for each browser tab. Random identifiers can still constitute personal information even though they do not contain a name. A behavioral summary describes a visit; it is not a device fingerprint. Text a shopper enters into the panel is stored, up to 2,000 characters, and can include personal information voluntarily entered by that shopper.
Raw behavior on our servers is deleted after ninety days during active service. After service access ends, the seven-day export/recovery period is followed by deletion on the eighth day, subject to legally required retention. Clearing server records does not remotely clear identifiers in a shopper’s browser. The browser’s cookie and storage settings can remove them.
4. Consent on Merchant Stores
By default, the shopper-side script starts without waiting for a cookie banner. It can wait for consent when the merchant’s banner sends the required signal. Installation alone does not establish consent integration. Customer is responsible for providing accurate notices and configuring and verifying any consent or opt-out controls required for its store before collection begins.
The presence of a Shopify cookie banner does not by itself establish that it is connected to the Widget. Merchants should verify the signal and the Widget’s behavior before relying on consent or opt-out settings. Disabling the Widget in Shopify’s theme editor stops the Widget from running; it does not by itself cancel a paid subscription. Store visitors can contact the merchant about its consent controls.
5. Providers Used on Our Website and Account Services
- Google Analytics: website and service-usage analytics. Google Privacy Policy.
- Stripe: payment-related infrastructure and fraud prevention. Sell&Tell subscriptions are billed exclusively through Shopify. Stripe Privacy Policy.
- Intercom: customer communications and related functionality. Contracted customer support is email-only. Intercom Privacy Policy.
- HubSpot: marketing automation and lead management. HubSpot Privacy Policy.
- Meta: advertising and conversion measurement. Meta Privacy Policy.
- Google Ads: advertising and conversion measurement. Google Privacy Policy.
- Microsoft/Bing: advertising and conversion measurement. Microsoft Privacy Statement.
- LinkedIn: advertising and business lead tracking. LinkedIn Privacy Policy.
Provider technologies and lifetimes depend on the functions deployed and browser settings. These providers are not all installed on every page. The list does not mean their advertising technologies run through the shopper Widget on merchant stores. Store and shopper data processed for merchants is subject to the Data Processing Agreement.
6. Your Choices
Use browser settings to block or delete cookies and browser storage. This may sign you out or affect functionality. You can also use providers’ privacy controls, the Google Analytics opt-out browser add-on, and participating advertising-provider choices. To request an opt-out of sale, sharing, or targeted advertising for our own website or business-contact information, email team@sellandtell.ai. Requests will be handled under applicable law; a merchant controls requests concerning its store.
A browser’s legacy Do Not Track signal is not the same as a consent signal sent by a merchant’s banner. The Services do not respond to legacy Do Not Track signals. Where applicable law requires recognition of an opt-out preference signal such as Global Privacy Control, that signal must be treated as an opt-out for the processing it covers. Merchants must verify their actual Widget integration; this policy is not a representation that every store’s banner or signal handling is automatically connected.
7. Changes and Contact
We update this policy when relevant practices change and provide any notice required by law. Questions about cookies, providers, or privacy choices should be sent to Hesient Inc. at team@sellandtell.ai.