Introduction
This Cookie Policy explains how invitation.codes ("we," "us," or "our") uses cookies and similar technologies when you visit our website at https://v3.invitation.app/ and use our services, including our browser extension.
This policy should be read together with our Privacy Policy, which explains how we collect and use personal information.
Table of Contents
- What Are Cookies?
- Cookies and Storage We Use
- Third-Party Services
- Browser Extension Storage
- Your Cookie Choices
- Global Privacy Control and Do Not Track
- Updates to This Policy
- Contact Us
1. What Are Cookies?
1.1 Definition
Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They help websites remember your preferences and understand how you use the site.
1.2 Similar Technologies
In addition to cookies, we use:
- Local Storage: Data stored in your browser that persists until cleared
- Session Storage: Data stored temporarily during your browser session
- A device identifier: A value derived from device characteristics and kept in local storage as
invt_fp_id, used for security and fraud prevention while you are signed in. It is not created for signed-out visitors (see Section 2.2 of our Privacy Policy)
2. Cookies and Storage We Use
The tables below list the cookies and browser storage keys the site sets.
2.1 Essential
These keep you signed in, protect the site and remember your cookie choice. They are set whatever you choose in the cookie banner, because the site cannot work without them.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
better-auth.session_token | Cookie | invitation.codes | Keeps you signed in. Sent as __Secure-better-auth.session_token over HTTPS. | 7 days, renewed while you use the site |
better-auth.session_data | Cookie | invitation.codes | Short-lived cache of your signed-in session | 5 minutes |
invt_cookie_consent_v1 | Cookie | invitation.codes | Remembers whether you accepted or rejected optional cookies | 6 months |
invt:privacy:cookie-consent:v1 | Local storage | invitation.codes | The same cookie choice, kept in your browser | Until you clear it |
invt_fp_id | Local storage | invitation.codes | Device identifier used for security and fraud prevention while you are signed in (see the Privacy Policy). Not created for signed-out visitors. | Until you clear it |
2.2 Functional
These remember your settings and let features you use pick up where you left off.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
g_state | Cookie | Google (Sign in with Google) | Remembers whether you closed the Google One Tap prompt | Up to 6 months |
theme | Local storage | invitation.codes | Your light or dark theme | Until you clear it |
invt:*, auth_redirect_url, friend | Local storage | invitation.codes | Drafts, recent searches, where to return after sign-in, and who invited you. Only written when you use those features. | Until you clear it or finish the action |
2.3 Analytics
These load only after you accept optional cookies:
- Rybbit, which we host ourselves. It counts page views and keeps a visitor identifier in local storage. It does not count views of the legal pages. If you later withdraw your choice, we delete that identifier.
- PostHog product analytics.
Before you choose, after you reject, and while your browser sends Global Privacy Control, neither loads and no analytics identifier is stored in your browser.
Cloudflare Web Analytics currently measures page loads on every visit, whatever you choose in the cookie banner. It sets no cookies and stores nothing in your browser.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
rybbit-visitor-id | Local storage | Rybbit (self-hosted by us) | Counts repeat visits in our first-party analytics. Only after you accept optional cookies; removed when you withdraw. | Until you clear it or withdraw consent |
ph_<project>_posthog | Local storage | PostHog | Product analytics identifier | Until you clear it |
2.4 Advertising
Magazine articles can show display ads from Ezoic. Ads are shown only to signed-out visitors, and only after you accept optional cookies. Ezoic and its advertising partners then set their own cookies; see Ezoic's privacy policy for the list.
| Name | Type | Set by | Purpose | Duration |
|---|---|---|---|---|
| Ezoic and its advertising partners | Cookie | Ezoic | Ad delivery and measurement on magazine articles, for signed-out visitors | Set by each provider |
We do not sell your personal information for money. Advertising cookies can count as "sharing" under California law. See our Do Not Sell or Share page for your options.
3. Third-Party Services
These providers process data when you use the site. The last column says when each one runs.
| Provider | What it does | Where | When it runs |
|---|---|---|---|
| Netcup | Hosting of our application servers and primary database | Germany | Every visit, whatever you choose in the cookie banner |
| Cloudflare | DNS, content delivery and security for every request; storage of uploaded images (R2); our email service (Tinbox) runs on Cloudflare Workers | Global network, United States | Every visit, whatever you choose in the cookie banner |
| Cloudflare Web Analytics | Aggregate page-load and performance measurement. It sets no cookies. | Global network, United States | Every visit, whatever you choose in the cookie banner |
| Rybbit (self-hosted by us) | First-party page-view analytics. It does not count views of the legal pages. | Our own infrastructure | Only after you accept optional cookies |
| PostHog | Product analytics and error reports | United States | Browser analytics: only after you accept optional cookies. Error reports from our servers: always |
| Sentry | Error monitoring | United States | Browser errors: only after you accept optional cookies. Errors on our servers: always |
| Google (Sign in with Google) | Signing in with a Google account, including the One Tap prompt shown to signed-out visitors | United States | When you sign in, or see the sign-in prompt |
| Google Firebase Cloud Messaging | Delivering browser push notifications you turn on | United States | Only if you turn on push notifications |
| Ezoic | Display advertising on magazine articles, for signed-out visitors | United States | Only after you accept optional cookies |
| Paddle | Subscription checkout and billing | United Kingdom, United States | Only when you make a payment |
| Stripe | Payment processing | United States | Only when you make a payment |
Payment providers may set their own cookies on their checkout pages for fraud prevention.
If you follow a link to a merchant, a referral program or an affiliate network, that site may set its own cookies under its own policy.
4. Browser Extension Storage
4.1 Extension Storage
Our browser extension uses browser storage APIs to:
- Store your authentication token
- Cache referral code data for quick access
- Remember your extension preferences
- Track which deals you've viewed
4.2 Extension Tracking
The extension may collect:
- Websites where you activate the extension
- Which referral codes you view or use
- Extension feature usage statistics
This data is used to:
- Show relevant referral codes
- Improve extension functionality
- Prevent fraud and abuse
5. Your Cookie Choices
You can change or withdraw your choice at any time: open and choose again. The same control is in the footer of every page and in the menu under Help & Support.
5.1 The Cookie Banner
On your first visit we ask whether you accept optional cookies. If you reject them, PostHog, Rybbit, browser error reporting and advertising do not load. Essential and functional storage, and Cloudflare Web Analytics (Section 2.3), are not affected by the banner.
Cookie settings brings the banner back. If you accepted optional cookies and then reject them, the page reloads so that anything that had already started stops.
5.2 Browser Settings
Most browsers allow you to:
- View cookies: See what cookies are stored
- Delete cookies: Remove some or all cookies
- Block cookies: Prevent new cookies from being set
- Accept/reject cookies: Control which cookies are allowed
5.3 How to Manage Cookies by Browser
- Chrome: Settings > Privacy and Security > Cookies
- Firefox: Settings > Privacy & Security > Cookies
- Safari: Preferences > Privacy > Cookies
- Edge: Settings > Cookies and site permissions
5.4 Advertising Opt-Out Tools
5.5 Impact of Disabling Cookies
If you disable cookies:
- You may not be able to log in
- Some features may not work properly
- Your preferences won't be remembered
- You may see the cookie consent banner repeatedly
6. Global Privacy Control and Do Not Track
6.1 Global Privacy Control (GPC)
If your browser sends a Global Privacy Control signal, we treat it as a rejection of optional cookies. PostHog, Rybbit, browser error reporting and advertising do not load, and accepting optional cookies has no effect while the signal is on. For California residents, we also treat it as a request to opt out of the sale or sharing of personal information.
GPC does not switch off the essential and functional storage in Section 2, or Cloudflare Web Analytics, which currently runs on every visit (Section 2.3).
6.2 Do Not Track
We do not respond to Do Not Track (DNT) browser signals. Use Global Privacy Control or the cookie banner instead.
7. Updates to This Policy
We may update this Cookie Policy periodically. Changes will be posted on this page with an updated "Last updated" date.
For significant changes, we will:
- Display a notice on our website
- Update the cookie consent banner
- Email registered users if required by law
8. Contact Us
If you have questions about our use of cookies:
Email: [email protected]
This Cookie Policy is part of and subject to our Terms of Service and Privacy Policy.