Cookie Policy
Last updated:
ChaosBoost is operated by CHAOSBOOST LIMITED, Company No. 78740814, Office 3906, 39th, The Center, 99 Queen’s Road, Central, Hong Kong. Contact: support@chaosboost.com.
What this policy covers
This policy explains cookies and similar storage used by ChaosBoost. Cookies are small browser files. Local storage keeps data between visits; session storage normally lasts for the current tab session. These technologies can contain identifiers, preferences, cart details and information about visits or orders. For personal-data handling and your rights, see our Privacy Policy.
Storage used by ChaosBoost
The table describes our own website storage. A stated expiry is the configured maximum, not a promise that every browser retains data that long. Some periods restart when a value is renewed. Storage without automatic expiry remains until it is cleared or replaced. Authentication, checkout and cart storage supports requested services; visit and advertising attribution serves a separate measurement purpose.
| Name and type | Purpose | Duration |
|---|---|---|
| cookies_accepted — local storage | Remembers the cookie notice choice for Google consent signals. | No automatic expiry. |
| currency — cookie; chaosboost_currency and chaosboost_geo_currency — local storage | Stores selected or region-based display currency. | Cookie: 365 days. Local storage: no automatic expiry. |
| chaosboost_node_cart_v4; legacy chaosboost_node_cart_v3 — local storage | Remembers cart contents. | 24 hours from the last save; expired contents are discarded when read. |
| chaosboost_node_cart_clear_v1; chaosboost_node_offers_v1 — local storage; cb_transient_popup_at — local storage | Synchronises cart clearing between tabs, remembers checkout offer selections and limits repeated interface notices. | No automatic expiry. |
| cb_checkout_client — cookie | Identifies the checkout browser for order access and abuse prevention. | 365 days. |
| cb_checkout_blocked_until_v1 — local storage | Remembers a temporary checkout rate limit. | Until the block expires, normally within 1 hour; cleared when checked after expiry. |
| cb_checkout_idempotency; chaosboost_checkout_pending_order_v1 — session storage | Prevents duplicate checkout attempts and reconciles the order after payment. | Until the outcome is processed or the tab session ends. |
| cb_customer_session; customer_auth; cb_purchase_session — cookies | Maintains account sign-in or access granted after a purchase. | Up to 30 days; removed on logout. |
| cb_customer_oauth_state; cb_customer_oauth_nonce; cb_customer_oauth_verifier; cb_customer_oauth_locale — cookies | Secures Google sign-in and restores the chosen language. | Up to 10 minutes; removed on callback. |
| cb_referral — cookie | Attributes an eligible referral to the referring customer. | Up to 90 days; removed when the referral is linked to an account. |
| cb_visit — cookie; cb_visit_attribution — session storage | Measures visits and campaign attribution. | Cookie: 30 minutes, renewed during tracked visits. Session storage: the tab session. |
| cb_google_ads_purchase:[transactionId] — session storage | Prevents queuing the same Google Ads purchase event twice. | The tab session. |
| cb_booster_session; cb_booster_locale; cb_booster_mobile_mfa; cb_native_oauth — cookies | Supports sign-in, language and security checks in restricted Booster or native-app flows. | 7 days; browser session; 5 minutes; 10 minutes, respectively. |
External services
Availability depends on the features you use and the integrations enabled on the website. The following are provider-documented examples, not a claim that every technology is set on every visit. Provider defaults can change with configuration and browser restrictions. Loading an external service also sends technical request data, such as your IP address and browser details, to that provider.
| Provider / technology | Purpose and when used | Provider default duration |
|---|---|---|
| Google Analytics: _ga, _ga_[container-id] cookies | Audience and session measurement when Analytics is enabled. | 2 years; configurable. |
| Google Ads: _gcl_ cookies | Advertising attribution, conversion measurement and personalised advertising, including remarketing, when Ads is enabled. | 90 days. |
| Intercom: intercom-session-[app_id], intercom-device-id-[app_id], intercom-id-[app_id] cookies | Support conversation continuity, device identification and visitor identification when Messenger is enabled. | 1 week, 270 days and 9 months, respectively; subject to provider configuration or renewal. |
| Intercom: intercom.intercom-state-[app_id] — local storage | Caches Messenger and visitor state. | No automatic expiry. |
| Stripe: __stripe_mid, __stripe_sid, m cookies | Fraud prevention on Stripe's hosted Checkout after you follow a payment link. | 1 year, 30 minutes and 2 years, respectively. |
The duration of intercom-id-[app_id] can vary with Intercom’s session and consent configuration. Google reCAPTCHA, when enabled on forms, uses _GRECAPTCHA for risk analysis to help prevent fraud and abuse; its expiry depends on the active configuration. Check your browser’s site-data information and the provider notices for the values used in your session.
Stripe may use additional storage for enabled payment features, such as Link. This is separate from a claim that all payment-provider storage is necessary. Game-content links may load Wowhead tooltips from wow.zamimg.com; the external request is subject to that provider's practices. A link or logo for a review or social platform does not by itself mean that its tracking technology runs on ChaosBoost.
Provider information: Google cookies, Google reCAPTCHA, Intercom Messenger storage, Intercom privacy, Stripe cookies and Stripe privacy.
Your choices and current controls
Where a cookie notice is shown, it records Accept or Close as an accepted or declined choice for Google's consent signals. Close records a refusal; continuing to browse is not an affirmative choice. This notice does not switch off every technology described above: first-party visit and referral tracking, and the support integration, are controlled separately. Google consent signals are not the same as blocking every network request.
You can block or delete cookies and other site data in your browser. Clearing ChaosBoost site data resets the stored notice choice, so the notice appears again on a later visit where that notice is used. It can also sign you out, empty your cart and reset preferences. Some storage can be created again when you use the relevant feature; blocking necessary storage may stop sign-in or checkout from working. The cookie notice itself has no separate settings or reopen control. For help with your preferences or privacy rights, contact support@chaosboost.com.
U.S. advertising and privacy
For visitors in the United States, we may not display a general cookie pop-up where prior consent is not required. The absence of a pop-up does not count as consent or remove your privacy rights. Rights depend on your state of residence and applicable law, not the language you select or your location on a particular visit.
We use Google Ads for personalised advertising and remarketing. For these purposes, online identifiers, IP addresses and device or browser information, pages and products viewed, cart activity and purchase or conversion information may be collected from your browser and interactions with us and disclosed to Google as an advertising provider. We use this information to select and measure advertising. Disclosures for cross-context behavioural advertising can be “sharing”, and some advertising disclosures can be a “sale”, under applicable U.S. privacy laws even without a monetary payment. The storage tables above describe browser retention; our Privacy Policy explains retention of other personal information. Deleting browser storage does not by itself erase server-side records.
We do not discriminate against you for exercising applicable privacy rights.
Where applicable law requires prior consent for a particular use, including certain processing of sensitive information or minors’ information, we obtain the required consent before that use. Where such processing is prohibited, we do not carry it out. Hiding the general U.S. cookie pop-up does not override these restrictions. For privacy requests, or requests through an authorised agent where permitted, contact support@chaosboost.com; our Privacy Policy explains additional rights and contact options.
Updates
We update this policy when our storage practices change. The date above identifies this version. Provider retention and available features may vary; our Privacy Policy explains the handling of personal data beyond browser storage.