Starting January 1st, 2026, Shopify will discontinue setting two internal cookies on merchant storefronts: _shopify_s and _shopify_y. These cookies have been used internally by Shopify for tracking and functionality purposes, but the platform is moving away from relying on them for core operations. Any custom code currently accessing these cookie values will need to be updated to use documented, supported APIs instead.
If your store or apps use custom JavaScript that directly accesses these internal cookies via document.cookie, your functionality may break after the deadline without updates. Shopify emphasizes that accessing internal cookies is not a recommended practice, as these values change frequently and have no guaranteed stability. This shift encourages developers to adopt more reliable, officially-supported methods for accessing the data they need.
If you're building OAuth-authenticated Shopify apps, GetShopifyToken simplifies secure token management and API authentication—eliminating the need to rely on undocumented cookies for sensitive data handling.