Cookie Policy
ROLLBed d.o.o. — global policy, all markets
Version 1.0 · Effective from 7 August 2026
This Cookie Policy applies to rollbed.co and to all regional versions of our online store.
In this policy, “ROLLBed”, “we”, “us” and “our” mean ROLLBed d.o.o. “ROLL” means the product you are buying.
1. Who we are
This Website is operated by:
ROLLBed d.o.o.
Prisavlje 10, 10000 Zagreb, Croatia
OIB: 15060072816 · VAT ID: HR15060072816
Customer support: support@rollbed.co
Privacy enquiries: privacy@rollbed.co
Website: https://rollbed.co
If you have any questions regarding this Cookie Policy or our use of cookies, please contact us using the details above.
2. What are cookies and similar technologies?
Cookies are small text files placed on your computer, smartphone or other device when you visit a website. Cookies allow websites to recognise your browser, remember certain information and improve your browsing experience.
In addition to traditional browser cookies, we also use similar technologies including:
- browser cookies;
- local storage;
- session storage;
- pixels;
- tags;
- server-side event technologies;
- software development kits (SDKs);
- similar browser-based technologies.
For simplicity, throughout this Cookie Policy we refer to all of these technologies collectively as “cookies.”
Some information may also be processed using secure server-side technologies rather than browser cookies alone. These technologies help us improve reliability, fraud prevention and measurement while reducing reliance on browser-based storage.
Where server-side technologies are used for analytics or marketing purposes, they remain subject to the same consent requirements under applicable law as browser-based cookies.
The same applies to local storage and session storage. Where we use these to store information that is not strictly necessary for the Website to work, we do so only after you have consented, on the same terms as cookies.
Cookies generally fall into two categories.
First-party cookies are placed directly by ROLLBed and are used to operate and improve our Website.
Third-party cookies are placed by carefully selected service providers who assist us with payment processing, analytics, advertising, fraud prevention and Website functionality.
Cookies may also be classified according to how long they remain on your device.
Session cookies exist only while your browser remains open and are automatically deleted when you close your browser.
Persistent cookies remain on your device until they expire automatically or are manually deleted. They allow the Website to remember your preferences between visits.
Not every technology we use stores information directly on your device. Some technologies process information through secure servers or cloud infrastructure. Where applicable, these technologies are treated in the same manner as cookies under this Policy.
3. Why we use cookies
We use cookies and similar technologies to provide a secure, reliable and user-friendly shopping experience.
Depending on the type of cookie and your consent preferences, cookies help us:
- operate and maintain the Website;
- provide shopping cart and checkout functionality;
- remember your preferences and settings;
- process payments securely;
- authenticate users;
- detect and prevent fraud;
- protect our Website against malicious activity;
- improve Website performance;
- understand how visitors interact with our Website;
- identify technical issues;
- measure the effectiveness of advertising campaigns;
- personalise marketing communications where permitted;
- improve our products and services;
- comply with legal obligations.
Some cookies are essential for the Website to function properly. Without these cookies, important features such as shopping carts, secure checkout, fraud prevention and payment processing would not operate correctly.
Optional cookies are used only where permitted by applicable law and, where required, only after you have provided your consent.
4. Categories of cookies
We divide cookies into four categories.
A. Strictly necessary cookies
These cookies are essential for the operation and security of the Website. They enable functions such as:
- shopping cart management;
- customer login;
- secure checkout;
- payment processing;
- fraud detection and prevention;
- website security;
- network management;
- load balancing;
- remembering your cookie preferences;
- accessibility features;
- maintaining user sessions.
Without these cookies, the Website cannot function properly. Because they are essential for providing the services you request, they cannot be disabled through our cookie preference centre.
Where permitted by applicable law, these cookies are processed without requiring your consent because they are necessary to perform our contract with you, protect our legitimate interests or comply with legal obligations.
We keep this category narrow. A cookie is strictly necessary only where the Website could not deliver what you asked for without it. Analytics, advertising and measurement technologies are never treated as strictly necessary, whatever their provider describes them as.
B. Preference cookies
Preference cookies remember choices you make while using the Website to improve your browsing experience. These may include:
- preferred language;
- country or region;
- accessibility preferences;
- display settings;
- product configuration preferences;
- other interface customisations.
These cookies do not store sensitive personal information.
Some of these functions are delivered by cookies we treat as strictly necessary, because the store could not give you what you asked for without them — for example serving the regional version and currency you selected. The table in section 5 shows how each cookie we actually use is classified.
Where required by applicable law, preference cookies are activated only after you have provided your consent.
Separately from the cookies you choose, we determine your approximate location from your IP address when you first arrive, in order to show you the correct regional version of our store. This happens on our servers and does not store anything on your device, so it is not controlled by the cookie preference centre. You can override the region we select at any time by choosing a different one from the region selector on our Website.
C. Analytics cookies
Analytics cookies help us understand how visitors interact with our Website. These cookies help us measure:
- Website traffic;
- visitor behaviour;
- navigation paths;
- product popularity;
- conversion performance;
- Website speed;
- technical errors;
- overall Website performance.
Analytics information is generally collected in aggregated or pseudonymised form and is used to improve our Website and customer experience.
This category also includes session-recording technology, which reconstructs how a visitor moved through a page — scrolling, clicks and interaction with page elements. Text you type into form fields, payment details and other sensitive input are masked and are not recorded.
Where required by applicable law, including within the European Economic Area and the United Kingdom, analytics cookies remain disabled until you actively provide your consent.
D. Marketing cookies
Marketing cookies help us understand the effectiveness of our advertising and improve future marketing campaigns. These cookies may be used to:
- measure advertising performance;
- attribute purchases to marketing campaigns;
- limit repetitive advertising;
- build advertising audiences;
- measure conversions;
- improve advertising relevance;
- support remarketing campaigns across participating platforms.
Marketing cookies are never activated before consent where applicable law requires prior opt-in.
Where you consent to marketing cookies, information about your visit and any purchase is shared with Meta and Google for advertising purposes. Under some United States state privacy laws this counts as a “sale” or as “sharing” of personal information, whether or not we are paid for it. You can stop it at any time by declining marketing cookies through our cookie settings, or through our opt-out page at rollbed.co/pages/data-sharing-opt-out. We also honour the Global Privacy Control browser signal.
5. Cookie providers we currently use
Our Website uses cookies and similar technologies provided by ROLLBed and carefully selected third-party service providers. These providers help us operate our online store, process payments securely, analyse Website performance, and measure the effectiveness of our advertising.
The providers we currently use include the following.
| Provider | Primary purpose | Cookie category |
|---|---|---|
| Shopify | Website hosting, shopping cart, checkout, customer sessions, fraud prevention and Website security | Strictly necessary |
| Shopify Payments | Secure payment processing and payment authentication | Strictly necessary |
| Shopify (consent management) | Recording and storing your cookie preferences | Strictly necessary |
| Shopify (store analytics) | Visitor measurement and marketing attribution within our store | Analytics and marketing |
| Google Analytics 4 | Website analytics, visitor measurement, Website performance and conversion analysis | Analytics |
| Microsoft Clarity | Session recording, heatmaps and analysis of how visitors interact with the Website | Analytics |
| Google Ads | Advertising conversion measurement and attribution of purchases to Google advertising | Marketing |
| Meta Pixel | Advertising attribution, campaign measurement, conversion tracking and remarketing | Marketing |
The specific cookies used by these providers may change from time to time as their services evolve. We review the table below at least every six months, and whenever we add or remove a service provider we update it accordingly. The date of the last review is shown beneath it.
Cookies we set
The following table lists the cookies and similar technologies used on our Website, who sets them, what they do and how long they last. Durations are those applied by the provider and may vary slightly by region.
| Cookie / storage key | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
| _shopify_essential | Shopify (1st) | Operates core store functions, your session and site security | 1 year | Strictly necessary |
| cart | Shopify (1st) | Stores the contents of your shopping cart | About 4 weeks, or until your order is placed | Strictly necessary |
| cart_currency | Shopify (1st) | Remembers the currency you are shopping in | About 4 weeks | Strictly necessary |
| localization | Shopify (1st) | Remembers the regional version of the store you are viewing | 1 year | Strictly necessary |
| shopify_pay | Shopify (1st) | Supports Shop Pay accelerated checkout and recognises you if you have used Shop Pay before | 1 year | Strictly necessary |
| cartToken (local storage) | Shopify (1st) | Identifies your cart so that its contents can be retrieved | Until you delete it | Strictly necessary |
| consentHeader (session storage) | Shopify (1st) | Records the cookie choices you have made | End of session | Strictly necessary |
| _shs_state (session storage) | Shopify (1st) | Maintains your state while browsing the store | End of session | Strictly necessary |
| __quiltRouterScroll (session storage) | Shopify (1st) | Restores your position on the page when you navigate back | End of session | Strictly necessary |
| __ui, lastSeenErrorReceiptId (local storage) | Shopify (1st) | Supports storefront interface state and reporting of errors | Until you delete it | Strictly necessary |
| signInWithShop:cartSyncTransferCompletedAt (local storage) | Shopify (1st) | Supports Shop account sign-in and synchronisation of your cart | Until you delete it | Strictly necessary |
| shopify:webmcp_adapter_loaded (local storage) | Shopify (1st) | Records that a storefront component has finished loading | Until you delete it | Strictly necessary |
| shopify_recently_viewed | Shopify (1st) | Remembers the products you have recently viewed so they can be shown to you again | 90 days | Preference |
| _shopify_y | Shopify (1st) | Distinguishes visitors for store analytics | 30 hours | Analytics |
| _shopify_s | Shopify (1st) | Measures the length of a visit for store analytics | 30 minutes | Analytics |
| _shopify_analytics | Shopify (1st) | Supports Shopify’s store analytics | 1 year | Analytics |
| lastExternalReferrer, lastExternalReferrerTime (local storage) | Shopify (1st) | Records the website you arrived from and when | Until you delete it | Analytics |
| ri-…, wpm-ri-… (session storage) | Shopify (1st) | Supports Shopify’s web pixel manager, which delivers analytics and advertising technologies | End of session | Analytics |
| __shopify_agent_context_events (session storage) | Shopify (1st) | Records storefront interaction events | End of session | Analytics |
| _ga | Google (1st) | Distinguishes visitors for Google Analytics | 400 days | Analytics |
| _ga_KY8FQKEZ5Y, _ga_RL5SCGG67W | Google (1st) | Maintains session state for each Google Analytics property in use | 400 days | Analytics |
| _clck | Microsoft (1st) | Links your browser to a Microsoft Clarity user identifier | 1 year | Analytics |
| _clsk | Microsoft (1st) | Groups your page views into a single session recording | 1 day | Analytics |
| _cltk (session storage) | Microsoft (1st) | Stores a temporary identifier for your current session recording | End of session | Analytics |
| _shopify_marketing | Shopify (1st) | Supports attribution of a purchase to the marketing that led to it | 1 year | Marketing |
| trackedSourceId, trackedCompleteOrderSourceId (local storage) | Shopify (1st) | Records the source of your visit, and of a completed order, for marketing attribution | Until you delete it | Marketing |
| wpmLoggedConversion1 (local storage) | Shopify (1st) | Records that a completed purchase has already been reported to our analytics and advertising technologies, so that it is not counted twice | Until you delete it | Marketing |
| _fbp | Meta (1st) | Identifies your browser for advertising attribution and remarketing on Meta platforms | 90 days | Marketing |
| _gcl_au | Google (1st) | Stores advertisement click information so that a purchase can be attributed to a Google advertisement | 90 days | Marketing |
| _gcl_ls (local storage) | Google (1st) | Stores advertisement click information for Google conversion measurement | Until you delete it | Marketing |
| roll_attribution (local storage) | ROLLBed (1st) | Remembers which campaign brought you to our site so that an order can be attributed to it | 30 days | Marketing |
Table last reviewed: 6 August 2026, by direct inspection of the live store.
Adding an item to your cart, and completing a purchase, sets further cookies which are necessary for those functions.
A note on “first-party”. Every cookie in the table above is set in our own domain, which is why each is marked “1st”. This does not mean the information stays with us. Where a cookie is set by Google, Microsoft or Meta, that provider receives the information it collects and may use it for its own purposes, as described in its own privacy notice. The “set by” column tells you which organisation the information reaches.
Our checkout is operated by Shopify and is delivered from checkout.shopify.com and checkout.pci.shopifyinc.com. Google Pay is offered as a payment method at checkout and is loaded from pay.google.com, which means Google receives your IP address when the checkout page loads, whether or not you choose to pay by that method. These technologies are necessary to provide and secure the checkout you have asked to use.
Where required by law, our cookie preference centre will display the latest categories of optional cookies before requesting your consent.
We use Shopify’s Customer Privacy API to help ensure that optional analytics and marketing technologies are activated only after the appropriate consent has been obtained where required by applicable law. Our consent preferences are communicated to supported third-party technologies to assist with compliance with applicable privacy legislation.
Additional information regarding how these providers process personal information, including legal bases for processing, international transfers, recipients and retention periods, is available in our Privacy Policy.
6. International data transfers
Some of the service providers identified in this Cookie Policy operate internationally and may process information outside your country of residence.
For example, information collected through cookies may be processed in countries including the United States and other jurisdictions where our service providers maintain operations or infrastructure.
Shopify is established in Canada, which the European Commission has recognised as providing an adequate level of protection for commercial organisations. Google, Meta and Microsoft process information in the United States.
Where personal information is transferred outside the European Economic Area, the United Kingdom or Switzerland, we implement appropriate safeguards as required by applicable law. Depending on the circumstances, these safeguards may include:
- European Commission adequacy decisions;
- Standard Contractual Clauses;
- the UK International Data Transfer Addendum;
- the EU–US Data Privacy Framework and its UK Extension, where the recipient is certified under it.
Although we take reasonable steps to protect information transferred internationally, the level of legal protection may differ between jurisdictions.
Further information regarding international data transfers can be found in our Privacy Policy.
7. Your cookie choices
When you first visit our Website you will be presented with a cookie preference banner, where you may choose how optional cookies are used, unless your browser or a browser extension prevents the banner from loading. Where we are unable to ask you, we do not use any cookie or similar technology that is not strictly necessary for the Website to work.
Subject to your location and applicable law, you may:
- accept all cookies;
- reject non-essential cookies; or
- manage cookie preferences.
Rejecting optional cookies is as easy as accepting them: both choices are offered at the same level of the banner and with equal prominence, and we do not require you to accept cookies in order to use our Website.
Where applicable law requires prior consent, optional cookies are not activated unless and until you have actively consented.
Your cookie preferences are stored using a strictly necessary cookie so that your choices can be remembered during future visits.
You may change or withdraw your consent at any time by selecting Cookie Settings in the footer of our Website.
We will ask you to confirm your preferences again from time to time, and in any event before we begin using a new technology in a category you have already declined.
Changing your preferences does not affect the lawfulness of any processing carried out before your consent was withdrawn.
If you withdraw consent, optional cookies that rely upon your consent will no longer be activated during future browsing sessions. Previously stored cookies may remain on your device until they expire automatically or are manually deleted through your browser settings.
8. Browser controls and privacy signals
Most web browsers provide controls allowing you to manage cookies directly. Depending on your browser, you may be able to:
- delete stored cookies;
- block future cookies;
- restrict third-party cookies;
- automatically delete cookies when your browser closes;
- configure site-specific cookie permissions.
Browser settings are an additional control available to you. They are not how we obtain your consent, and we do not treat a browser setting as consent to optional cookies.
Please note that disabling strictly necessary cookies may affect important Website functionality, including shopping cart functionality, customer login, secure checkout, fraud prevention, payment processing, Website security and certain accessibility features.
Some browser settings affect only traditional browser cookies and may not prevent information from being processed through server-side technologies or similar tracking mechanisms.
We honour the Global Privacy Control browser signal as a request to opt out of the sharing of personal information for advertising purposes, as described in section 4D. You can also opt out directly at rollbed.co/pages/data-sharing-opt-out.
At this time, we do not respond to legacy Do Not Track (DNT) browser signals because there is no universally accepted legal or technical standard governing their interpretation.
For additional control over online advertising, many advertising providers also offer their own privacy settings and opt-out mechanisms through their respective platforms.
9. Children’s privacy
Our Website is intended for a general audience and is not directed toward children.
We do not knowingly use cookies or similar technologies to profile, market to, or knowingly collect personal information from children through our Website.
If we become aware that personal information relating to a child has been collected contrary to applicable law, we will take reasonable steps to delete that information or otherwise comply with applicable legal requirements.
Parents or legal guardians who believe that a child has provided personal information through our Website may contact us using the details below.
10. Changes to this Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our Website, our products or services, our technology providers, the cookies and similar technologies we use, applicable laws or regulatory guidance, or our business operations.
Where required by applicable law, we will obtain renewed consent before activating newly introduced optional cookies or before processing personal information for materially different purposes.
The latest version of this Cookie Policy will always be published on our Website. The effective date and version shown at the top of this Policy indicate when it was most recently revised.
We encourage you to review this Cookie Policy periodically to remain informed about how we use cookies and similar technologies.
11. Contact us
If you have any questions regarding this Cookie Policy, our use of cookies, or your privacy choices, please contact us.
ROLLBed d.o.o., Prisavlje 10, 10000 Zagreb, Croatia
OIB: 15060072816 · VAT ID: HR15060072816
Customer support: support@rollbed.co · Privacy enquiries: privacy@rollbed.co
Website: https://rollbed.co
Where applicable, we will respond to privacy-related requests within the time periods required by applicable data protection laws.
12. Related policies
This Cookie Policy forms part of our broader privacy and legal framework.
For additional information regarding the collection, use and protection of personal information, please refer to our:
- Privacy Policy
- Terms & Conditions for your market
These documents should be read together, as they explain different aspects of how we operate our Website, provide our services and process personal information.
If any provision of this Cookie Policy conflicts with mandatory requirements of applicable privacy or consumer protection law, those mandatory legal requirements will prevail to the extent of the conflict.
Cookie preference centre
You can review or update your cookie choices at any time by selecting Cookie Settings in the footer of our Website.
Through the Cookie Preference Centre, you may:
- review the categories of cookies currently in use;
- accept all optional cookies;
- reject non-essential cookies;
- enable or disable individual categories of optional cookies where supported;
- withdraw previously granted consent.
If you are in the United States, you can also opt out of the sharing of your personal information for advertising purposes at rollbed.co/pages/data-sharing-opt-out.
Your updated preferences will apply to future processing after they have been saved.
Please note that changing your preferences does not automatically remove cookies previously stored on your device. Existing cookies may remain until they expire automatically or are manually deleted through your browser settings.
Governing law
This Cookie Policy shall be interpreted in accordance with the laws of the Republic of Croatia.
Nothing in this Cookie Policy limits or excludes any mandatory privacy or consumer protection rights that apply to you under the laws of your country of residence where such rights cannot legally be excluded.
© 2026 ROLLBed d.o.o. All rights reserved.