The short version. Our public website sets no cookies of its own and doesn't use advertising or analytics trackers. When you sign in to the web wallet or the reader, we set three small, strictly necessary cookies to keep you signed in safely. Nothing is written to your browser's local storage, session storage or IndexedDB by the web wallet or reader.
1. What this page covers
Cookies are small text files a website asks your browser to keep. “Local storage” and similar features let a website or app keep data on your device. This page describes the cookies and storage Ibile Hub uses, and sits alongside our Privacy Policy, which explains how we handle any personal information they involve.
2. The public website
Pages such as the home page, the games list, the help pages and the legal pages set no cookies of our own. We don't use analytics cookies, advertising cookies, social-media pixels or cross-site trackers on them. Because we only use cookies that are strictly necessary to provide something you ask for, we don't show a cookie banner.
3. When you sign in on the web
The web wallet (ibile.games/wallet) and the reader (ibile.games/read) need you to sign in. When you do, we set these cookies. They are strictly necessary: without them you can't stay signed in or pay safely.
| Cookie | What it does | How long | Protections |
|---|---|---|---|
ibile_web | Keeps you signed in. Its value can't be read by scripts on the page, so a malicious script can't steal it. | 30 days, renewed each time you use the site while signed in. Removed when you sign out. | HttpOnly, Secure, SameSite=Strict, sent only to our /api paths. |
ibile_csrf | A random value the page repeats in a header on every change you make, so another website can't make requests on your behalf (protection against cross-site request forgery). | Same as ibile_web. Removed when you sign out. | Secure, SameSite=Strict. Readable by our own page so it can be repeated; it contains no personal information. |
ibile_dev | A random identifier for this browser, so we can tell one browser from another and alert you when a new device signs in. It contains no personal information. | 400 days. Stays after you sign out, because it identifies the browser rather than your sign-in. | HttpOnly, Secure, SameSite=Strict, sent only to our /api paths. |
We keep nothing else in your browser: the wallet and reader do not use local storage, session storage or IndexedDB, and nothing else keeps you signed in apart from these cookies.
4. Third-party requests
- Fonts. Our pages load their typefaces (Tanker and General Sans) from Fontshare. Your browser asks Fontshare for them, so Fontshare receives your IP address and browser details, as any host of a web font does. We don't send them anything else, and we don't use the request for tracking.
- Sign-in protection. Where it is switched on, the web sign-in form uses Cloudflare Turnstile to tell people from bots. It loads a script and a small frame from Cloudflare and may process your IP address and browser signals, and use its own storage, to do so. It only loads on the sign-in page, and we use it for nothing else.
- Payment pages. When you pay, you leave our site for our payment provider's secure page (Paystack or Flutterwave). They have their own cookies and privacy notices, which we don't control. See our Privacy Policy for who they are.
- Story images. Chapter pages are served from our content delivery network over secure, short-lived links.
5. The Android and iOS apps
The apps don't use browser cookies. They store some things on your device so they work as you expect:
- the code that keeps you signed in, in your device's secure storage;
- your settings and preferences, such as notifications, sound, theme and low-data mode;
- games and practice games saved for offline play, and a top-up that is waiting to be confirmed;
- chapters you have chosen to download, in a protected form that stops working if the unlock is removed; and
- a device identifier, used to keep you signed in and to alert you about new devices.
If you allow notifications, your phone's system also holds a code that lets us send you notifications. You can switch notifications off in the app or in your device settings.
6. Managing cookies and storage
- On the web, signing out removes
ibile_webandibile_csrf. You can remove all three, or any other site data, in your browser's settings. If you block them, you won't be able to sign in on the web, and public pages still work. - In the apps, signing out clears your sign-in, and uninstalling the app removes what it stored on the device. You can clear downloads in Settings.
7. Changes and contact
If we ever add a cookie or tracker that isn't strictly necessary, we will update this page, tell you, and ask for your consent first. Questions? Email hello@ibile.games.