Overview
InviteBird, operated by SKYPOP DESIGNS ("InviteBird," "we," "us"), uses a small number of cookies and similar technologies to keep the service working and, only with your permission, to understand how it is used. This page explains what we set, why, and how to change your choices. It supplements our Privacy Policy.
What a cookie is
A cookie is a small text file stored by your browser. Cookies can be strictly necessary (the site cannot function without them) or optional (such as analytics). We also use your browser’s local storage for a few small conveniences, described below.
Cookies we set
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
better-auth.session_token | Keeps you signed in to your account. | Essential | ~7 days |
ib_unlock_* | Remembers that you unlocked a password-protected invitation (one per invitation you open). | Essential | 7 days |
ib_cookie_consent | Stores your cookie choice (granted or denied) so we don’t ask again. | Essential | 12 months |
ib_cookie_consent_revision | Changes when you update your cookie choice, so a page cannot send queued article activity from an earlier consent choice. It contains no browsing activity and is not sent to analytics providers. | Essential | 12 months |
_ga, _ga_<id> | Google Analytics — measures aggregate site usage. Set only after you accept analytics cookies. | Analytics | Up to 2 years |
ph_*_posthog | PostHog — product analytics and session diagnostics that help us understand how InviteBird is used and fix rough edges. Inputs you type are masked in any session diagnostics, and guest invitation pages are excluded. Set only after you accept analytics cookies. | Analytics | Up to 12 months |
Neither Google Analytics nor PostHog runs in your browser until you accept analytics cookies in our banner. If you decline — or simply never accept — no analytics cookies are set and neither tool tracks your browsing. (Separately from cookies, our own servers keep ordinary operational records, such as payment and message-delivery events, as described in our Privacy Policy.) PostHog also uses browser local storage for the same consent-gated purpose, and PostHog data is processed in the EU (Frankfurt).
Local storage
For guest convenience, some interactive features store a little information in your browser’s local storage rather than in a cookie. This stays on your device and is not used for advertising:
- A display name you enter for a live quiz or playlist, so you don’t have to retype it.
- A randomly generated device identifier, so a game can recognize your device between rounds.
You can clear these at any time by clearing site data in your browser settings.
Third-party embeds
Some invitation pages include Google Fonts and Google Maps. When such a page loads these embeds, your browser requests them from Google’s servers, which means Google receives your IP address and standard request information. These are provided by Google under its own privacy terms. We do not use them to track you across sites.
Changing your choice
You can change your mind at any time. Reopen the cookie banner using the “Cookie choices” control in our site footer, or clear the ib_cookie_consent cookie (or all site data) in your browser — the banner will appear again on your next visit so you can accept or decline. You can also block or delete cookies entirely in your browser settings, though strictly necessary cookies are required for the service to work.
Global Privacy Control & DNT
We honour Global Privacy Control (GPC). If your browser or extension sends a GPC signal — either the Sec-GPC request header or the navigator.globalPrivacyControl property — we treat it as a request to opt out of optional cookies and analytics. We record the choice as a decline, no analytics or product-analytics scripts are loaded, and we do not show you the cookie banner, because you have already told us your preference and you should not have to answer twice. A GPC signal takes precedence over an earlier “Accept” on this browser.
We do not sell or share your personal information, so there is no sale to opt out of; GPC governs the optional-cookie layer here. We treat only a value of 1 as a signal — a browser sending Sec-GPC: 0 is explicitly saying it is not opting out, and we respect that too.
We do not act on the older “Do Not Track” (DNT) header, which was never standardised and has been withdrawn by the W3C and removed from most browsers. It is superseded here by GPC and by the accept-or-decline choice in our banner. Because our analytics cookies load only after you actively accept them, declining — or clearing your consent choice from the “Cookie choices” control in our footer — already prevents analytics tracking.
Questions about cookies
If you have any questions about our use of cookies, please reach out to: