MYSTIC REBELS

COOKIE POLICY

Last Updated: July 24, 2026

---

This Cookie Policy explains how Mystic Rebels LLC, doing business as Mystic Rebels (“Mystic Rebels,” “we,” “us,” or “our”), uses cookies and similar technologies when you visit mysticrebels.com, use a customer account, shop, book services, communicate with us, or use related online features. It supplements our Privacy Policy and Consumer Health Data Privacy Policy.

Depending on your location, we ask for consent before using non-essential technologies and provide controls to withdraw or change that consent. Technologies that are strictly necessary to provide a service you request may operate without optional consent where law permits.

1. Cookies and similar technologies

A cookie is a small text file stored on a browser or device. Cookies can recognize a browser, maintain a session, remember choices, support security, measure site activity, attribute referrals, or assist advertising. Some cookies expire when the browser closes; others remain for a defined period or until deleted.

Similar technologies include pixels, tags, scripts, software development kits, local storage, device identifiers, server-side events, and other methods that store information on or access information from a device. This Policy refers to all of these as “cookies” unless a distinction is necessary.

2. First-party and third-party cookies

First-party cookies are set by Mystic Rebels or through our Shopify storefront domain. Third-party cookies or similar technologies are set or operated by providers that support the store, customer accounts, payments, apps, analytics, referrals, communications, or other features.

Third-party providers may receive device, browser, network, interaction, account, transaction, or consent information according to their function, our instructions, applicable contracts, and their own privacy notices.

3. Categories of cookies we use

Strictly necessary and security

These technologies operate the storefront and requested services. They may support carts, checkout, payment, fraud screening, load balancing, authentication, customer accounts, order status, privacy choices, session security, and protection against abuse. Disabling them through a browser may prevent parts of the site from functioning.

Functional and personalization

These technologies remember preferences and support features such as language or region, wishlists, reviews, subscriptions, booking, chat, digital delivery, memberships, saved selections, and customer-service functions. Depending on the feature and applicable law, some may be necessary for a requested service and others may be optional.

Analytics and performance

These technologies help understand how the storefront performs and how visitors interact with pages, products, navigation, checkout, and features. They may process page views, clicks, referral sources, device information, approximate location derived from IP address, session activity, errors, and conversion events. Where required, they operate only after consent.

Affiliate and referral attribution

GoAffPro and related referral tools may use referral links, click identifiers, browser or device information, order attribution, and a cookie lasting up to 30 days to determine whether a purchase qualifies for affiliate or practitioner-program credit. Blocking the cookie may prevent accurate referral attribution.

Advertising and cross-context technologies

Advertising cookies can measure campaigns, limit repeated advertisements, create or select audiences, personalize advertising, or associate activity across websites or services. Some privacy laws call these activities “sale,” “sharing,” or “targeted advertising” even when no money is paid for the data.

As of the effective date, Mystic Rebels has not intentionally activated third-party advertising pixels for Meta, Google Ads, Pinterest, or TikTok. We may evaluate advertising technologies in the future. Before intentionally activating them, we will configure applicable consent and opt-out controls and update our disclosures when required.

4. Shopify and Shopify Network Intelligence

Our storefront, checkout, customer accounts, payment environment, and core commerce functions are provided by Shopify. Shopify uses cookies and related technologies to provide, secure, personalize, analyze, and improve its services.

Shopify Network Intelligence is currently enabled. Shopify may securely use data from our store together with data from other Shopify merchants to generate insights that power Shopify Enhanced Services, which may include improved products, personalization, performance, fraud or security capabilities, and advertising-related features. Other merchants do not receive direct access to Mystic Rebels customer data through this feature.

Shopify is configured to respect applicable consent, data-sharing opt-out, deletion, and Global Privacy Control choices when those choices are received through Shopify’s supported privacy tools. Shopify also provides its own privacy portal and consumer privacy notice.

For more information, review the Shopify Consumer Privacy Policy and Shopify Cookie Policy.

5. Store features and app providers

Store features and app providers may use cookies or similar technologies as needed to provide their functions. Current or anticipated categories include:

Shopify Inbox for customer chat and communications.

Judge.me for product reviews and review interactions.

Wishlist Hub for saved products and wishlist functionality.

Appstle for subscriptions and membership-related commerce.

Appointo for booking and appointment functionality.

GoAffPro for affiliate and practitioner referral attribution.

FetchApp, Shopify digital-delivery tools, and Fileflare for purchased digital-product access.

Shopify Email and Omnisend for consented marketing and message measurement, when used.

Not every provider necessarily sets a cookie during every visit. Providers and technologies may change as the store evolves. We review this Policy and our consent configuration when a material technology or purpose is added.

6. Sensitive information and protected service areas

Mystic Rebels does not intentionally use advertising cookies or audience-building technologies to collect or use health and wellness intake, astrology birth information, private session content, client-file information, recordings, transcripts, or delivered-reading content for advertising.

We seek to keep advertising and ordinary analytics technologies away from sensitive intake, client-file, recording, transcript, and similar protected workspaces. Technologies strictly necessary for booking, authentication, security, videoconferencing, document delivery, or another requested service may still operate.

7. Cookie consent and preference controls

Mystic Rebels currently uses Shopify’s automated customer-privacy settings. Shopify determines where its cookie banner should appear based on configured markets, regional requirements, and current Shopify settings. In regions requiring prior consent, non-essential Shopify-controlled technologies are intended to remain inactive until the visitor makes an applicable choice.

You can accept, reject, or adjust available categories through the cookie banner or the Cookie Preferences link provided by the storefront. You can return to those controls to change a choice. Withdrawal applies prospectively and does not undo processing that occurred lawfully before the change.

A refusal of optional cookies should not prevent access to the basic storefront, although some personalization, analytics, chat, wishlist, or other optional features may be limited.

8. Data-sharing opt-out and Global Privacy Control

Mystic Rebels currently uses Shopify’s automated data-sharing opt-out page. Where applicable, it allows visitors to opt out of processing that may be legally defined as sale, sharing, or targeted advertising.

Where required by law and supported by our storefront configuration, we honor Global Privacy Control and other recognized opt-out preference signals for the browser or device sending the signal. The signal generally applies to that browser or device and may need to be repeated elsewhere.

9. Browser and device controls

Most browsers allow users to view, block, or delete cookies. Device settings may provide additional controls for tracking, advertising identifiers, or local storage. Browser-level blocking may not affect every similar technology and may cause carts, accounts, checkout, preferences, or other services to malfunction.

Browser “Do Not Track” signals are not standardized and may not produce a response. This is different from a legally recognized Global Privacy Control signal, which we honor where required.

10. Cookie duration

Session cookies generally expire when the browser closes. Persistent cookies remain for a defined period or until deleted. Duration depends on the purpose, provider configuration, consent, security needs, and applicable law. For example, the GoAffPro attribution cookie may last up to 30 days. Shopify and app providers may change individual cookie names or durations as their services evolve.

We do not intentionally retain cookie-derived information longer than reasonably necessary for the stated purpose, legal compliance, security, consent records, dispute handling, or other purposes described in our Privacy Policy.

11. Changes to this Cookie Policy

We may update this Policy when technologies, providers, purposes, consent tools, or laws change. The revised version will be posted with a new effective date. We may provide additional notice or request new consent when required.

12. Contact us

Mystic Rebels LLC
7901 4th St N Ste 300
St Petersburg, FL 33702, USA
Email: vibe@mysticrebels.com