Legal
Cookie Policy
The cookies and similar technologies Instaloops sets, what each one is for, how long it lasts, and how to control them.
Effective September 14, 2026 · Hubmind LLC
2. Strictly necessary cookies
These keep the Service working. Without them you cannot stay signed in or complete a purchase, so they are set whenever you use Instaloops and cannot be switched off from within the Service.
| Cookie | What it does | Lifetime |
|---|---|---|
| sb-<project>-auth-token, sb-access-token | Keeps you signed in between page loads and lets the server recognise your session. | Session to 1 year, refreshed as you use the Service |
| stytch_session_token, stytch_session_jwt | The session for accounts that authenticate through our identity provider, Stytch. | Up to 30 days |
| stytch_auth_redirect, stytch_auth_type | Remembers where you were headed and how you signed in, so a magic link or Google sign-in returns you to the right page. | 30 minutes |
| ref | Credits the member whose invite or referral link brought you here when you sign up. | Up to 30 days |
3. Analytics
We measure traffic with Plausible Analytics, which we chose because it is cookieless: it sets no cookie, stores nothing on your device, and does not build a profile of you across sites. It records aggregate page views, referrers and rough country-level location. We also keep server-side request and error logs, which include IP addresses, to run and secure the Service.
4. Optional and third-party cookies
These are set only when you use the feature they belong to. Where consent is required in your region, we ask for it before setting them, and you can withdraw it at any time.
| Cookie | What it does | Lifetime |
|---|---|---|
| Google sign-in (accounts.google.com) | Set by Google when you use Sign in with Google or Google One Tap, to authenticate you and prevent abuse. Governed by Google's own privacy policy. | Set by Google |
| FirstPromoter (fpr.js) | Attributes a sign-up to the affiliate or partner who referred you, so they can be paid. Loaded only on our marketing surfaces. | Up to 90 days |
Community owners can embed third-party content — video players, calendars, forms. Embedded content can set its own cookies, which are governed by that provider’s policy, not this one.
5. What we do not do
We do not use advertising cookies, we do not run third-party ad networks on Instaloops, and we do not sell or share personal information for cross-context behavioral advertising.
6. How to control cookies
Every major browser lets you see the cookies a site has set, delete them, and block them — look for “Cookies and site data” in privacy settings. Most also offer a private-browsing mode that clears everything when you close the window.
Blocking the strictly necessary cookies above will sign you out and break sign-in, so the Service will not work. Blocking the optional ones only affects the feature they support.
Browsers that send a Global Privacy Control or “Do Not Track” signal are respected where the law requires us to treat it as an opt-out request.
7. Changes to this policy
We update this policy when the technologies we use change, and we update the effective date at the top of the page. Questions go to [email protected].
Questions about this policy?
Write to [email protected] and a person will answer. Tell us which policy you are asking about so we can route it quickly.