What cookies are
Cookies are small files a website stores in your browser. Similar technologies include local storage. We use the word 'cookies' for all of them.
Essential cookies
These are needed for the website and app to work and can't be switched off. They don't track you across other sites.
Our website (igpone.com) sets no cookies of its own. Cloudflare may set one security cookie, described below, when it needs to check for bots.
Sign-in session (sb-…-auth-token, first party, app.igpone.com, Supabase authentication): keeps you signed in securely. It lasts up to 400 days, is refreshed while you stay signed in, and is deleted when you sign out. A large session may be split into two parts ending in .0 and .1.
Sign-in security check (sb-…-auth-token-code-verifier, first party, app.igpone.com): protects your sign-in link from misuse. It is deleted as soon as you sign in (at most 400 days).
Sign-up handoff (igp_site_entry, first party, app.igpone.com): carries the plan, language and request you chose on our website into sign-up. It lasts 1 hour and is deleted after use.
Consent record (igp-consent, stored in your browser's local storage on igpone.com): remembers your cookie choices and the date you made them, so we don't ask on every page. It stays until you clear it, and we ask again after 12 months.
Security (__cf_bm, Cloudflare, .igpone.com): set only when Cloudflare needs to check whether a visitor is a bot, to protect the site from attacks. It lasts 30 minutes.
Analytics cookies
Off by default. We use them only if you turn them on. We don't use any analytics cookies today. If we add an analytics provider, we will list it here first and ask for your consent before it runs.
Marketing cookies
Off by default. We use them only if you turn them on. We don't use any marketing or advertising cookies today, and we don't sell or share your data for advertising.
Our mobile apps
Our iOS and Android apps don't use cookies. They store your sign-in session and preferences on your device, and a push notification token if you allow notifications, and they send crash reports so we can fix errors.
The apps contain no advertising SDKs and don't track you across other companies' apps or websites.
How we ask for consent
When you first visit, a banner offers Accept, Reject and Settings with equal weight. No optional cookie or script runs before you choose. We record your choice and ask again after 12 months or if we add a new purpose or provider.
We treat a Global Privacy Control (GPC) signal from your browser as a refusal of optional cookies.
Changing your choices
Open Cookie settings in the website footer or in the app at any time. You can also delete or block cookies in your browser settings; if you block essential cookies, sign-in and some features won't work.
Third-party pages
When you pay through Stripe Checkout or sign in with Instagram, Google or Apple, you are on their pages, and their cookie policies apply.
