Legal Document

    Cookie Policy

    Which cookies Kiboo uses, why and how you can control them.

    Last updated: 24 May 2026

    In summary: Kiboo uses strictly necessary cookies to make the service work (authentication). With your consent, we also use analytics (Google Analytics) and marketing (Meta Pixel) cookies to understand how the site is used. You can decline them at any time from the banner.

    1. What Are Cookies

    Cookies are small text files that websites store on your device during browsing. They allow the site to remember information about your visit, for example, that you have logged in, in order to provide a better and more consistent experience.

    There are several categories of cookies, classified by duration (session or persistent) and origin (first-party, set by Kiboo; third-party, set by other services).

    Kiboo also uses the browser's localStorage to store local preferences (e.g. whether you have already closed the cookie banner). localStorage is not transmitted to servers; it remains exclusively on your device.

    2. Cookie Categories (ePrivacy)

    Pursuant to the ePrivacy Directive (2002/58/EC) and the Guidelines of the Italian Data Protection Authority, cookies are classified as:

    • Strictly necessary technical cookies, essential for the site to function. No consent required.
    • Functional cookies, improve the experience but are not essential. Consent required.
    • Third-party analytics cookies, measure traffic and usage. Consent required.
    • Profiling/marketing cookies, track preferences for targeted advertising. Consent required.

    Kiboo uses cookies from the first category (strictly necessary) and, only with your explicit consent, third-party cookies for analytics (Google Analytics) and marketing (Meta Pixel) purposes. See section 4 for details.

    3. Technical Cookies Used by Kiboo

    The following cookies are set by Kiboo via Supabase Auth and are necessary for the authentication system to function. Without them, login and session maintenance are not possible.

    Cookie namePurposeDurationType
    sb-access-tokenJWT authentication token, identifies the logged-in user's sessionUp to 1 hour (auto-renewed)1st party, Strictly necessary
    sb-refresh-tokenToken for silent session renewal without re-loginUp to 1 week1st party, Strictly necessary
    sb-[project-ref]-auth-tokenSession token specific to the Supabase projectSession / persistent1st party, Strictly necessary

    These cookies do not contain personal data in plain text. The token is cryptographically signed and verified server-side. They cannot be used by third parties to track browsing.

    localStorage items (not standard cookies)

    localStorage keyPurposeDuration
    kiboo_cookie_consentStores whether the user has accepted or closed the cookie bannerPermanent (until manual browser deletion)

    4. Third-Party Cookies

    4.1 Stripe (payments)

    When you access payment pages or the subscription portal, Stripe may set its own cookies to prevent fraud and ensure transaction security.

    • __stripe_mid, Stripe session identifier (1 year)
    • __stripe_sid, Short Stripe session identifier (30 minutes)
    • Stripe Cookie Policy →

    4.2 Google (OAuth)

    When you use 'Sign in with Google', Google's domain may set its own cookies to manage the authentication flow. These cookies are managed entirely by Google and subject to their Cookie Policy.

    4.3 Google Analytics (GA4)

    With your consent, we use Google Analytics 4 to understand how the site is used (pages viewed, progress through the Health Score quiz). Data is processed in aggregated form.

    Cookie namePurposeDurationType
    _gaDistinguishes unique visitors for site usage statistics2 years3rd party (Google), Analytics — consent required
    _ga_<container-id>Maintains session state for Google Analytics 42 years3rd party (Google), Analytics — consent required

    4.4 Meta Pixel (Facebook/Instagram)

    On the Health Score quiz page, with your consent, we use the Meta Pixel to measure the performance of our Facebook and Instagram ad campaigns.

    Cookie namePurposeDurationType
    _fbpIdentifies the browser for Meta advertising3 months3rd party (Meta), Marketing — consent required
    _fbcRecords a click on a Meta ad, if present3 months3rd party (Meta), Marketing — consent required
    You can withdraw your consent to analytics and marketing cookies at any time via the cookie banner or your browser settings (see section 5).

    5. How to Manage Cookies

    5.1 Kiboo consent banner

    On your first visit to Kiboo, an information banner is shown. You can:

    • Accept, you confirm the presence of the technical cookies described above
    • Strictly necessary only, equivalent to the above (Kiboo only uses necessary cookies)
    • Close the banner, the banner will return on your next visit

    We do not require consent for strictly necessary cookies (Supabase auth), as they are exempt pursuant to the ePrivacy Directive and the Italian DPA Guidelines of 10 June 2021.

    5.2 Browser settings

    You can manage or disable cookies directly in your browser. Here are the guides for the most popular browsers:

    ⚠️ Warning: disabling strictly necessary cookies (Supabase auth) prevents the correct functioning of login and the Kiboo private area.

    5.3 Revoking consent

    To reset Kiboo's cookie banner preferences, clear your browser's localStorage or contact us at hello@kiboo.pet.

    6. Changes to the Cookie Policy

    Kiboo reserves the right to update this Cookie Policy to reflect any technical, regulatory or service changes. If new cookie categories are introduced (e.g. analytics or marketing), we will update the consent banner and require explicit opt-in before activation.

    Material changes will be notified by email and with an in-app notice at least 15 days before the effective date.

    For more information on cookies or personal data management, see our Privacy Policy or contact us at hello@kiboo.pet.