Cookie Policy

Cookies are small text files a website stores on your device. ByeByePromo also uses local storage, a similar browser technology that keeps small pieces of data on your device without sending them to us on every request. This policy explains which ones we use, why, and how you can control them.

Analytics and marketing cookies run only on our public pages (the home page, sign-in and sign-up, pricing and checkout, and our legal pages), never inside the app where your test results and connected inboxes are shown, and only as described below.

These cookies do not need your consent and cannot be refused.

• bbp_consent: first party, 6 months. Stores your cookie choices.
• __session, __client_uat and other __clerk cookies: set by Clerk, our authentication provider, to keep you signed in. Session lifetime.

These items are never sent to our servers on every request, and never used for analytics or advertising.

• Your Anthropic API key, if you add one in Settings: kept only in this browser and sent with your requests to the app.
• Hidden notices: remembers that you dismissed the email-provider notice on the dashboard.

We use Google Analytics 4 to understand how our public pages are used. It sets these cookies:

• _ga, _ga_<id>: up to 2 years.

Until you accept, the Google script runs without writing any cookie or identifier and sends cookieless pings, which still carry your IP address. If you accept, the cookies are written and visits are measured individually.

These cookies are set by Meta Pixel and Google Ads, only if you accept marketing cookies.

• _fbp (Meta): 3 months.
• _fbc (Meta): 3 months, only when you arrived from a Meta ad.
• _gcl_au, _gcl_aw (Google Ads): 90 days.
• bbp_attr (ByeByePromo, first party): 90 days. Stores the advertisement identifiers above (and the campaign parameters of the link you arrived from) on our own domain, because a subscription is often completed days after the click and our server must be able to connect the two. Written only if you accept marketing cookies, and deleted if you withdraw that consent.

When you are signed in, we keep a copy on your account record. For every signed-in user it holds your consent choice, with when you made it and against which version of this policy. Only while you consent to marketing cookies, it also holds your IP address and your browser identification, together with these advertising identifiers and the Meta browser identifier (_fbp); only while you consent to analytics cookies, the Google Analytics browser identifier (_ga). It is kept for as long as your account exists and deleted with it. If you withdraw consent, the corresponding data is removed from that copy at your next visit to our site while signed in.

When you sign up, your consent choice (and, only with marketing consent, the advertisement identifiers) travel with the sign-up form through our authentication provider, Clerk, and that copy is deleted once applied to your account.

We also send conversions from our own servers, only if you accept the matching cookies, so that a subscription you start or pay after you have closed the page is still counted. For marketing, Meta receives your account email in hashed form (the email of your ByeByePromo account or the one you give at checkout), your country in hashed form, your IP address, your browser identification, the Meta browser identifier (_fbp) and the advertisement click identifier, together with the name of the event (sign-up, trial started, payment), its value and currency, and the page it relates to. For analytics,Google Analyticsreceives the Google Analytics browser identifier, our internal account identifier, the event name (trial started, payment, renewal, cancellation, refund), its value and currency, the time, and your consent choice, but no email address and no IP address. Google Ads conversions are counted only by the browser tag, not from our servers: only with marketing consent, when you sign up it receives the conversion with its event identifier, and on the page shown after checkout it receives the conversion with its event identifier and value, together with your account email, which Google's tag hashes in your browser before sending it (Enhanced Conversions). The event identifiers sent to Meta and Google contain internal references: our account identifier for a sign-up, and the Stripe checkout or invoice reference for a trial or a payment. Until they are sent, these events wait in a queue on our servers; sent events are deleted after 30 days, failed ones after 90, and all of them with your account. Withdrawing consent stops further sends and removes the copies still waiting in the queue; it cannot recall what was already sent. Nothing obtained from a Gmail inbox is ever included.

The Meta Pixel loads only after you accept marketing cookies. Google and Meta never receive any data obtained from a Gmail inbox you connect to ByeByePromo.

You can change or withdraw your choice at any time from Cookie preferences, in the footer of our public pages and in the app's sidebar. It opens the same panel you saw on your first visit. Withdrawing stops the corresponding cookies and scripts. Cookies already set stay on your device until they expire or you clear them, and our pages no longer read or write them. Withdrawing works from then on: it cannot withdraw what was sent before.

Cookie preferences

While our cookie banner says so, scrolling the page after the banner appears counts as accepting analytics and marketing cookies. You can refuse before scrolling with the Reject all button, and withdraw at any time from Cookie preferences.

Sefirot Srl
Via Vittorio Amedeo Cignaroli 8, 10152 Turin, Italy
VAT: IT11963260010
hello@byebyepromo.com

See also our Privacy Policy.