Cookie Notice

This notice lists the cookies and browser storage Webba actually uses. Webba’s own are first-party: set by Webba, for Webba, and never shared with advertisers. On public pages, Microsoft Clarity also sets its own (below). Most are strictly functional — they keep you signed in, grant access to a conversation or a purchase, or remember a small interface preference. One, webba_src, is for measurement: it remembers how you first arrived, so we can tell which links and searches bring buyers. Webba uses no advertising and no cross-site tracking; its one third-party analytics service is Microsoft Clarity.

Cookies we set

• marketplace_session — keeps an operator signed in to the admin area. Holds an opaque session token; HTTP-only; about 30 days.
• webba_deal_room — grants a buyer access to their own conversation(s) with a seller. Holds signed access tokens; HTTP-only; about 30 days.
• webba_purchase — grants a buyer access to their purchase. Holds a signed access token, limited to purchase pages; HTTP-only; about 30 days.
• webba_src — measurement. Set on your first visit to a page: the campaign tags on the link you followed (utm_source, utm_medium, utm_campaign) if it had any, otherwise the kind of site that referred you and its host name, the page you landed on, and the time. It holds no IP address and nothing that identifies you, is read only if you later send an inquiry, offer or purchase request, and lasts 30 days. HTTP-only.

Webba’s cookies above are marked HTTP-only (not readable by page scripts), use the “lax” same-site setting, and are served securely in production. Cookies are set per website address: a domain’s own page (for example a name’s lander) has its own.

Microsoft Clarity

On our public pages (not account, seller or admin pages) we use Microsoft Clarity to see how pages are used: clicks, scrolling, the pages viewed and a replay of the visit. What you type into forms is masked and not recorded; offers, messages and the names you try in the name checker or the Logo Lab are hidden from it entirely. To link the pages of one visit, Clarity sets its own cookies, such as _clck (about a year) and _clsk (about a day) on our site, and Microsoft’s cookies on clarity.ms. For visitors from the EEA, the UK and Switzerland Clarity sets no cookies and records each page on its own. Microsoft processes this data under the Microsoft Privacy Statement. Blocking these cookies in your browser does not stop the site working.

Browser storage we use

• sessionStorage — a per-visit analytics id. A random identifier generated in your browser so we can group the actions of a single visit for our own product analytics. It is not a cookie, is not linked to your identity, and is cleared when you close the tab. If your browser blocks it, the site still works.
• localStorage — whether you have seen the chat introduction. Remembers that the Chat with Webba introduction has been shown, so it is not shown again. Never sent to our servers.
• localStorage — your logo lab downloads. Once you confirm your email in the logo lab, your browser keeps that address, a signed pass that lets you download without a new code each time, and a random identifier for this browser. They are sent to our servers only when you download a brand kit. Choosing “Not you?” removes the address and the pass.
• localStorage — an admin interface preference. The admin merchandising tools remember one on/off layout preference locally. It is never sent to our servers and does not apply to ordinary visitors.

Analytics

Our measurement is first-party and stays in our own database. Page views are counted on our servers: to count a visitor once rather than on every reload, we derive a keyed, one-way code from the IP address and browser type that changes every day; the IP address itself is not stored with the view, only the host name of the site that referred you. We also record a few actions — searches, opening Buy Now, following a WhatsApp, phone or email link, moving from one name to another — and, with an inquiry, offer or purchase request, how you first arrived (from webba_src). Visits from automated crawlers are not recorded. We do not use Google Analytics or any advertising service, and Microsoft Clarity is our only third-party analytics. See our Privacy Policy for how this data is used.

Contact

Questions: hello@webba.com.