Cookie Policy
Last updated:
ChaosBoost is operated by CHAOSBOOST LIMITED, Company No. 78740814, Office 3906, 39th Floor, The Center, 99 Queen’s Road, Central, Hong Kong. Contact: support@chaosboost.com.
What this policy covers
This policy explains cookies and similar storage used by ChaosBoost. Cookies are small browser files. Local storage keeps data between visits; session storage normally lasts for the current tab session. These technologies can contain identifiers, preferences, cart details and information about visits or orders. For personal-data handling and your rights, see our Privacy Policy.
Storage used by ChaosBoost
The table describes our own website storage. A stated expiry is the configured maximum, not a promise that every browser retains data that long. Some periods restart when a value is renewed. Storage without automatic expiry remains until it is cleared or replaced. Authentication, checkout and cart storage supports requested services; visit and advertising attribution serves a separate measurement purpose.
| Name and type | Purpose | Duration |
|---|---|---|
| chaosboost_cookie_notice; legacy cookies_accepted — local storage | Remembers that you have closed the cookie notice, so it is not shown again. | No automatic expiry. |
| chaosboost_geo_country — local storage | Remembers the country detected from your IP address (a two-letter code), so that later pages can decide straight away whether to show the cookie notice in your region. | No automatic expiry; updated when the detected country changes. |
| currency — cookie; chaosboost_currency and chaosboost_geo_currency — local storage | Stores selected or region-based display currency. | Cookie: 365 days. Local storage: no automatic expiry. |
| chaosboost_node_cart_v4; legacy chaosboost_node_cart_v3 — local storage | Remembers cart contents. | 24 hours from the last save; expired contents are discarded when read. |
| chaosboost_node_cart_clear_v1; chaosboost_node_offers_v1 — local storage; cb_transient_popup_at — local storage | Synchronises cart clearing between tabs, remembers checkout offer selections and limits repeated interface notices. | No automatic expiry. |
| cb_checkout_client — cookie | Identifies the checkout browser for order access and abuse prevention. | 365 days. |
| cb_checkout_blocked_until_v1 — local storage | Remembers a temporary checkout rate limit. | Until the block expires, normally within 1 hour; cleared when checked after expiry. |
| cb_checkout_idempotency; chaosboost_checkout_pending_order_v1 — session storage | Prevents duplicate checkout attempts and reconciles the order after payment. | Until the outcome is processed or the tab session ends. |
| cb_customer_session; customer_auth; cb_purchase_session — cookies | Maintains account sign-in or access granted after a purchase. | Up to 30 days; removed on logout. |
| cb_customer_oauth_state; cb_customer_oauth_nonce; cb_customer_oauth_verifier; cb_customer_oauth_locale — cookies | Secures Google sign-in and restores the chosen language. | Up to 10 minutes; removed on callback. |
| cb_referral — cookie | Attributes an eligible referral to the referring customer. | Up to 90 days; removed when the referral is linked to an account. |
| cb_visit — cookie; cb_visit_attribution — session storage | Measures visits and campaign attribution. | Cookie: 30 minutes, renewed during tracked visits. Session storage: the tab session. |
| cb_info_shop_v1 — session storage | Remembers which link on a ChaosBoost news or guide page (an article or a list of articles) brought you to the shop: where the link was on the page (text, banner, service block or navigation), the article’s number and type (news or guide), the addresses of that page and of the shop page it led to, and when you clicked. The click is reported to Google Analytics, and these details are added to the Google Analytics events of your visit, such as product views, cart changes and checkout steps. If you place an order, they are saved with the order and sent to Google Analytics with the purchase, so that we can see which articles lead to orders. | The tab session; a link counts for up to 30 days. Removed when you arrive from an ad, a campaign link or another website. |
| cb_info_shop_handoff_v1 — local storage | Passes the same details to a new tab when you open such a link in one, so that an order placed there and its Google Analytics events are attributed to the link in the same way. The site also rewrites it, usually as an empty list, on visits that do not come from an ad, a campaign link or another website. | No automatic expiry; an entry counts for 2 minutes and is deleted when the new tab uses it or the next time a page checks the list after it has expired. |
| cb_ads_click_v1 — local storage | Keeps the Google click identifier (gclid, gbraid or wbraid) from an ad you clicked, so that a later paid order can be attributed to that ad. | 90 days from the click; an expired value is deleted the next time it is read. |
| cb_microsoft_purchases_v1 — local storage | Records the order numbers of paid purchases already reported to Microsoft from this browser, so that the same purchase is not sent again from it. This is only a local safeguard for this browser; it does not guarantee that no duplicate is ever sent. | No automatic expiry. Keeps up to 500 order numbers; entries older than 365 days are no longer taken into account but may remain stored until a later purchase is recorded or the site data is cleared. |
| cb_ga4_payment:[orderId] — session storage | Remembers that the start of payment for an order has already been reported to Google Analytics, so that it is not reported twice. | The tab session. |
| cb_booster_session; cb_booster_locale; cb_booster_mobile_mfa; cb_native_oauth — cookies | Supports sign-in, language and security checks in restricted Booster or native-app flows. | 7 days; browser session; 5 minutes; 10 minutes, respectively. |
External services
Availability depends on the features you use and the integrations enabled on the website. The following are provider-documented examples, not a claim that every technology is set on every visit. Provider defaults can change with configuration and browser restrictions. Loading an external service also sends technical request data, such as your IP address and browser details, to that provider.
| Provider / technology | Purpose and when used | Provider default duration |
|---|---|---|
| Google Analytics: _ga, _ga_[container-id] cookies | Audience and session measurement when Analytics is enabled. | 2 years; configurable. |
| Google Ads: _gcl_ cookies | Advertising attribution, conversion measurement and personalised advertising, including remarketing, when Ads is enabled. | 90 days. |
| Microsoft Advertising (UET): _uetsid, _uetvid, _uetmsclkid cookies; MUID on Microsoft domains | Visit and purchase measurement, advertising audiences, remarketing and personalised advertising for Microsoft Advertising (Bing), for visitors in all countries and regions. _uetsid and _uetvid are session and visitor identifiers (Microsoft may also keep copies in local storage); _uetmsclkid stores the Microsoft click ID (msclkid) after you click a Microsoft ad, so that a purchase can be attributed to it; MUID is Microsoft’s own browser identifier, which Microsoft sets when the UET tag loads. | About 1 day, about 13 months (390 days) and 90 days, respectively; _uetsid and _uetvid are renewed on later visits. MUID: set by Microsoft, about 13 months. |
| Intercom: intercom-session-[app_id], intercom-device-id-[app_id], intercom-id-[app_id] cookies | Support conversation continuity, device identification and visitor identification when Messenger is enabled. | 1 week, 270 days and 9 months, respectively; subject to provider configuration or renewal. |
| Intercom: intercom.intercom-state-[app_id] — local storage | Caches Messenger and visitor state. | No automatic expiry. |
| Stripe: __stripe_mid, __stripe_sid, m cookies | Fraud prevention on Stripe's hosted Checkout after you follow a payment link. | 1 year, 30 minutes and 2 years, respectively. |
The duration of intercom-id-[app_id] can vary with Intercom’s session and consent configuration. Google reCAPTCHA, when enabled on forms, uses _GRECAPTCHA for risk analysis to help prevent fraud and abuse; its expiry depends on the active configuration. Check your browser’s site-data information and the provider notices for the values used in your session.
Stripe may use additional storage for enabled payment features, such as Link. This is separate from a claim that all payment-provider storage is necessary. Game-content links may load Wowhead tooltips from wow.zamimg.com; the external request is subject to that provider's practices. A link or logo for a review or social platform does not by itself mean that its tracking technology runs on ChaosBoost.
Provider information: Google cookies, Google reCAPTCHA, Microsoft Privacy Statement, Intercom Messenger storage, Intercom privacy, Stripe cookies and Stripe privacy.
Your choices and current controls
The cookie notice is for information only: pressing “Got it” just hides it and does not turn any cookies or tags on or off. Microsoft’s ad settings and Google’s My Ad Center let you control whether those companies show you personalised ads.
You can block or delete cookies and other site data in your browser. Clearing ChaosBoost site data removes the record that you closed the notice, so the notice appears again on a later visit where that notice is used. It can also sign you out, empty your cart and reset preferences. Some storage can be created again when you use the relevant feature; blocking necessary storage may stop sign-in or checkout from working. The cookie notice itself has no separate settings or reopen control. For help with your preferences or privacy rights, contact support@chaosboost.com.
U.S. advertising and privacy
Whether the cookie notice is shown depends on your region; it is for information only and does not change your privacy rights. Rights depend on your state of residence and applicable law, not the language you select or your location on a particular visit.
We use Microsoft Advertising (Bing) and Google Ads for personalised advertising and remarketing. For these purposes, online identifiers, IP addresses and device or browser information, pages and products viewed, cart activity and purchase or conversion information may be collected from your browser and interactions with us and disclosed to Microsoft and Google as advertising providers. We use this information to select and measure advertising. Disclosures for cross-context behavioural advertising can be “sharing”, and some advertising disclosures can be a “sale”, under applicable U.S. privacy laws even without a monetary payment. The storage tables above describe browser retention; our Privacy Policy explains retention of other personal information. Deleting browser storage does not by itself erase server-side records.
We do not discriminate against you for exercising applicable privacy rights.
Our advertising and analytics tags (Microsoft Advertising, Google Ads and Google Analytics) run for all visitors in every country and region; we do not ask for separate consent before they run. What they collect and where it is sent is described in “Data we share with Microsoft and Google” in our Privacy Policy. For privacy requests, or requests through an authorised agent where permitted, contact support@chaosboost.com; our Privacy Policy explains additional rights and contact options.
Updates
We update this policy when our storage practices change. The date above identifies this version. Provider retention and available features may vary; our Privacy Policy explains the handling of personal data beyond browser storage.