Updated: 18 September 2026
This policy covers cookies and similar browser storage on bubblz.ai and its language pages. App SDKs are covered separately in the Privacy policy. Necessary functions work without optional consent. Accept allows Analytics and App attribution; Reject allows neither; Customize lets you choose separately. Use the floating privacy icon to withdraw or change your choice. Global Privacy Control blocks optional tracking. We do not separately interpret Do Not Track.
| Storage and provider | Purpose/category | Duration |
|---|---|---|
| bbz-consent-v1 — self-hosted c15t | Necessary; consent choice and random identifier, cookie/local storage | 90-day choice; browser copies can remain until overwritten/cleared |
| c15t:pending-consent-sync — c15t local storage | Necessary; retries sending a consent receipt | Until synchronized, replaced or cleared |
| c15t-trigger-position — c15t privacy-icon position — local storage | Necessary preference for the movable settings control | Until replaced or cleared |
| trp_language — TranslatePress | Necessary language preference | Typically 30 days; configuration may vary |
| WordPress login/test cookies | Necessary when signing in | Session; remembered login typically up to 14 days |
| Wordfence storage | Necessary security and authenticated-user checks | Session or applicable security expiry |
| _ga and _ga_* — Google Analytics | Optional Analytics; visits and outbound clicks | Up to 2 years, subject to Google settings; cleared on withdrawal where accessible |
| ss_incoming_params — AppsFlyer local storage | Optional App attribution; campaign parameters and download links | Parameters valid 2 hours; cleanup on subsequent script runs or withdrawal |
| ss_webReferrer — AppsFlyer local storage | Optional App attribution; referral information | Until overwritten, cleared or consent withdrawn |
Google Tag Manager loads only after an optional category is allowed. Analytics permission enables Google Analytics; App attribution permission enables AppsFlyer link preparation and possible impression requests. The website displays no ads and enables no advertising/remarketing tags. Necessary site delivery, fonts, images, security and consent requests still disclose connection information to their providers; rejecting tracking does not prevent all external requests.
Our c15t service is hosted by AWS in the US. Consent evidence includes a random subject identifier, selections, time, site, language, policy version and available action/source information. The recorder does not store raw IP addresses or browser user-agent strings; hosting/security logs are separate. Records are kept up to 1,095 days; daily database backups up to 30 days; full-server backups follow separate cycles.
One choice applies across Bubblz language pages for 90 days in that browser. It does not apply to other devices, domains or the app. Withdrawal stops future optional loading, clears accessible Analytics/AppsFlyer storage and reloads the page. It does not delete data already held by providers. Clearing browser storage may prompt a new choice; blocking necessary storage may prevent preferences or sign-in from working. Local storage has no automatic cookie-style expiry unless our code enforces one.
Names and lifetimes can vary by feature or provider version; login/security storage appears only when relevant. Cookie expiry is different from provider data retention. For rights, transfers, recipients and deletion requests, see the Privacy policy or contact privacy@bubblz.ai.