Privacy choices

Choose optional tools for book-bounty.com and app.book-bounty.com in this browser. Essential security and privacy preference cookies stay on. Closing this window does not enable optional tools.

Withdrawal stops future optional tracking here and clears matching browser storage. Historical cleanup is handled separately by Book Bounty. It does not delete your account, billing or service records.

Cookie inventory · Privacy policy and requests

Enable support chat?

Intercom uses identifiers to provide chat and remember conversations. Enable support chat only, or email [email protected]. Your other privacy choices stay the same.

Cookie information

Updated 3 November 2026. to change optional permissions for book-bounty.com and app.book-bounty.com.

Essential privacy and security storage stays available. Optional integrations are disabled during the privacy rollout until the shared service and vendor checks are complete.

Essential preferences

  • bb_privacy: application-managed HttpOnly browser reference. Parent domain .book-bounty.com, path /, HTTPS, SameSite=Lax. Up to 24 hours before a choice, then up to the 180-day preference period.
  • bb_privacy_deny: readable refusal marker, same parent domain, path /, HTTPS, SameSite=Lax. Up to 180 days. Can refuse purposes, never grant them.
  • bb_privacy_revision: readable change notification, same scope, up to 180 days. Contains no permission grant.
  • bb_privacy_pending_reduction_v1: necessary session storage on the current origin, limited to a request ID and refused purpose keys, retained until acknowledgement or the browser session ends. Used only to retry a failed refusal.

Usage analytics: Google Analytics

_ga and _ga_Q0XRL1ZMEK identify a browser and session. Configured on .book-bounty.com, path /, for at most 180 days without refresh on each view. No GA tag is loaded before analytics permission. Historical Google retention is separate and requires the operator's retention review.

Advertising measurement: Book Bounty and Google

bb_gclick stores a validated gclid, gbraid or wbraid, collection time and type. Parent domain .book-bounty.com, path /, HTTPS, SameSite=Lax. Up to 90 days, bounded by the current permission expiry. Used by the application for permitted conversion reporting.

Affiliate attribution: Book Bounty and Rewardful

bb_affiliate and bb_visitor_token hold a referral slug and random visitor token. Parent domain .book-bounty.com, path /, HTTPS, SameSite=Lax. First touch, up to 90 days and bounded by permission expiry. Internal visits are sent to the application only with affiliate permission.

Rewardful may use rewardful.referral, rewardful.affiliate, rewardful.campaign and referral identifiers and decorate forms or links. Its loader has a separate release switch pending verification of the live campaign's storage names, domains, lifetimes, decoration and Stripe suppression. It stays disabled until that review is complete.

Support: Intercom

Intercom uses intercom-id-qihq3q3c, intercom-session-qihq3q3c and intercom-device-id-qihq3q3c, plus matching local identifiers. Its documented defaults include session storage of one week, a device cookie of 270 days and local entries without automatic expiry. This client requests a one-day session. The live messenger's scope, Secure settings and actual lifetimes require verification before release. Chat is optional; email [email protected] is always available.

Cleanup and limits

Refusal clears matching GA cookies (including legacy _gid and _gat variants), bb_gclick, the affiliate identifiers above, the named Intercom identifiers and legacy __eventn_id, __eventn_id_usr and __eventn_uid identifiers where this origin can access them. There is no active Jitsu loader. Cleanup tries current-host and parent-domain cookies at root and current page paths, and only matching storage keys. Login, security and payment storage is preserved.

This page cannot erase app-host-only cookies, HttpOnly storage, another origin's local storage or third-party storage. The application, the next visit to each domain and provider cleanup handle their respective scopes. Clearing browser identifiers is not confirmation of historical deletion. See the privacy policy for account processing and requests.