Cookie policy

ISBAD uses necessary storage to operate the website. Google cookies, the Meta pixel, analytics and referral tracking activate only if you choose Accept all.

Last updated: 14 September 2026

Choice

Accept all or Necessary only

Consent lifetime

180 days

Change your choice

At any time through the footer or button below

Withdraw consent or make a new choice.

1. Cookies and local storage

A cookie is a small text file stored by a website in your browser. Local storage is a similar browser function that can retain data between visits. We use both technologies and describe them together here.

Necessary storage is used without consent where required for a function you request, such as retaining the cart, protecting a login or saving your cookie choice. All other storage and equivalent tracking requires consent.

2. Your choice

On your first visit, you may choose Accept all or Necessary only. The options are equally accessible. The Google tag (Analytics and Ads) loads in restricted consent mode without cookies until you choose Accept all. The Meta pixel and PostHog do not load and no creator referral cookie is created until you give that consent.

Your choice is stored in the isbad_cookie_consent cookie for 180 days. If you change your mind, the choice is erased and the page reloads so optional services stop before you make a new choice.

3. Necessary and functional storage

The following storage is used for the stated service or feature.

isbad_cookie_consent: first-party cookie storing all or necessary for 180 days.
isbad_lang: first-party cookie storing the language you chose with the flag for 180 days, so geo-routing does not send you back.
isbad-cart: local storage holding cart products, quantities, price and currency until the cart or browser storage is cleared. It is sent to the server only when you use checkout.
Supabase authentication cookies: keep a creator signed in and refresh the creator-platform session. Lifetime follows the session and Supabase settings.
isbad_ig_state: HttpOnly cookie protecting Instagram login against forged requests, erased after no more than 10 minutes.
isbad_creator_pending: encrypted HttpOnly cookie temporarily holding a verified Instagram profile during registration, erased after no more than 15 minutes.
dashboard_session: HttpOnly cookie for authorised internal administrators, no more than 7 days. It is not used for ordinary visitors.

4. Analytics cookies after consent

Google Analytics measures matters such as page views, navigation, device and approximate location. Typical Google cookies are _ga and _ga_<measurement-id>, normally lasting up to two years. After the same consent the Google Ads tag may measure campaign conversions and set cookies such as _gcl_au. Without consent the tag does not set cookies; Google may then only receive cookieless measurement pings in consent mode. Exact names and periods may be changed by Google.

The Meta pixel measures page views, product views, add to cart and purchases so catalog ads can match the products. Typical cookies are _fbp and _fbc, normally up to 90 days. The pixel loads only after Accept all.

PostHog provides product analytics, autocapture and session recording so that we can understand interface use and find errors. PostHog may use cookies or local storage with names beginning ph_, normally for no more than about 12 months. Traffic passes through our /ingest address to PostHog's EU environment.

5. Referral cookies after consent

isbad_ref is a signed HttpOnly cookie created when you arrive through a creator link after consent. It contains the creator code, landing path, campaign data, a random session identifier and timestamp. It attributes an order and expires after no more than 30 days.

6. Managing and deleting

Use Change cookie choices or Manage cookies in the footer to withdraw or provide new consent. Removing the choice reloads the page without optional services and presents the choice again.

You can also block or erase cookies and local storage through your browser. The cart, login and other features may then stop working. Choices are not automatically synchronised across browsers or devices.

7. Responsibility and contact

ebutiq Global AB, Swedish company no. 559251-0910, is responsible for first-party technology and our selection of providers. Read the privacy policy for information about personal data, legal bases, transfers and your rights.

Send questions to info@isbad.com. We update this list when our use or provider technologies change.

1. Cookies and local storage

2. Your choice

Your choice is stored in the isbad_cookie_consent cookie for 180 days. If you change your mind, the choice is erased and the page reloads so optional services stop before you make a new choice.

3. Necessary and functional storage

The following storage is used for the stated service or feature.

isbad_cookie_consent: first-party cookie storing all or necessary for 180 days.

isbad_lang: first-party cookie storing the language you chose with the flag for 180 days, so geo-routing does not send you back.

isbad-cart: local storage holding cart products, quantities, price and currency until the cart or browser storage is cleared. It is sent to the server only when you use checkout.

Supabase authentication cookies: keep a creator signed in and refresh the creator-platform session. Lifetime follows the session and Supabase settings.

isbad_ig_state: HttpOnly cookie protecting Instagram login against forged requests, erased after no more than 10 minutes.

isbad_creator_pending: encrypted HttpOnly cookie temporarily holding a verified Instagram profile during registration, erased after no more than 15 minutes.