Legal
Cookie policy
Every cookie and browser-storage item PhoneBorn uses: one sign-in cookie, optional Google Analytics, two local settings and Cloudflare security checks — with durations and how to opt out.
Updated By PhoneBorn TeamEditorial policy
In short
- One strictly necessary cookie keeps you signed in.
- Google Analytics counts visits; it's optional and, in the EEA, the UK and Switzerland, only loads after you accept.
- Two small local-storage entries remember your cookie choice and a dismissed language hint.
- Cloudflare may set security cookies and runs a bot check on our forms.
- No advertising cookies, no cross-site tracking.
Everything we store in your browser
| Name | Type · set by | Purpose | Duration | Your choice |
|---|---|---|---|---|
| pb_session | Cookie (first-party, httpOnly, SameSite=Lax)PhoneBorn | Keeps you signed in to your account and dashboard. Set when you sign up or sign in; removed when you sign out. | 30 days | Strictly necessary — without it you can't sign in. |
| _ga, _ga_<ID> | Cookies (first-party analytics)Google Analytics | Count visits and see which pages are used, so we can improve the site. Google Signals and ad personalisation are switched off. | Up to 2 years | Optional. Asked first in the EEA, the UK and Switzerland; refusable everywhere via Cookie settings. |
| pb_consent | Local storagePhoneBorn | Remembers whether you accepted or declined analytics, so we don't ask on every page. | Until you clear site data | Only stores your choice; no tracking. |
| pb_lang_hint_dismissed | Local storagePhoneBorn | Remembers that you closed the “this page is available in your language” hint. | Until you clear site data | Only set if you close the hint. |
| Cloudflare Turnstile | Security check (may use cookies or storage)Cloudflare | Tells people and bots apart on the sign-up, sign-in, password-reset and contact forms. | Set by Cloudflare | Needed to submit those forms. |
| Cloudflare security cookies | Cookies (security)Cloudflare | Our site is delivered through Cloudflare, which may set its own cookies to protect the site from bots and attacks. | Set by Cloudflare, typically short-lived | Strictly necessary for security. |
How analytics consent works
If your browser's time zone is in the EEA, the UK or Switzerland, you see a banner and Google Analytics is not loaded at all until you press “Accept”. Everywhere else, Google Analytics loads without a banner once you start interacting with the page (scrolling, tapping, typing).
Declining stops Google Analytics from loading on later visits. Any _ga cookies already in your browser stay until they expire or you clear them.
How to opt out
- Use (also in the footer on every page) to accept or decline analytics at any time.
- Block or delete cookies and site data in your browser settings.
- Install Google's opt-out browser add-on for Google Analytics.
None of this affects your numbers, messages or wallet — except that blocking every cookie also stops you signing in.
More about your data
What we collect beyond cookies, how long we keep it and your rights are in the Privacy Policy. Questions? Use the contact form.
FAQ