Cookies
What we save in your browser.
Two things by default: a visitor ID and your consent choice. Anything else only if you say yes through the banner. Last updated 2026-04-28.
Categories
Strictly necessary — always on. The visitor ID and your saved consent choice. Without these, the site can't remember you between visits or honor your privacy preference.
Performance — opt-in. Klaviyo's onsite script (so we can fire welcome flows for known subscribers) and Core Web Vitals beacons (so we know which pages are slow).
Marketing — opt-in. Meta, GA4 advertising features, TikTok. Only used to measure whether ads work and to suppress already-converted users from the same ad creative again.
The full list
| Name | Set by | Category | Lifetime | What it does |
|---|---|---|---|---|
habb_visitor_id |
habb (first-party) | Strictly necessary | 365 days | Random ID so the site recognizes you between visits. No PII. |
habb_consent_v1 |
habb (localStorage) | Strictly necessary | Until you change it | Your consent choice. Read on every page load. |
habb_session_v1 |
habb (sessionStorage) | Strictly necessary | Until tab closes / 30 min idle | Session ID for analytics grouping. |
habb_attribution_v1 |
habb (localStorage) | Strictly necessary | Until cleared | First-touch UTM/click-ID record so we know which channel brought you. |
_kla_id + related |
Klaviyo | Performance | Up to 2 years | Loads only after performance consent. Powers email-flow personalization. |
_fbp, _fbc |
Meta | Marketing | 90 days | Loads only after marketing consent. Lets us measure whether a Meta ad led to your visit. |
_ga, _ga_* |
Marketing | Up to 2 years | Loads only after marketing consent. Google Analytics 4. | |
tt_* |
TikTok | Marketing | Up to 13 months | Loads only after marketing consent. TikTok Pixel. |
Marketing-category cookies (Meta, Google, TikTok) are not loaded today and will only be loaded after our paid-ad launch, and only if you grant marketing consent.
How to change your choice
Click Manage cookies here, or use the same link in the site footer on any page. The notice gives you Accept or decline. If you want finer control, email hello@habb.co and we will set your preference manually.
If your browser sends Global Privacy Control (Sec-GPC), we treat that as opt-out from performance + marketing automatically — no banner shown.
Pre-launch note
Today the only third-party cookie possible from habb.co is Klaviyo (performance). Meta / GA4 / TikTok are gated and not yet wired. The categories on this page describe the full architecture for transparency; what's actually loaded depends on consent + tag readiness.