AIRBORED · THE DETAILS
Cookie Policy
Cookies are one kind of browser storage. Airbored also uses IndexedDB, LocalStorage, SessionStorage and offline caches to make a flight’s entertainment work.
Last updatedEssential and requested storage
Essential storage supports the service you request: saved game state, local history and journeys, favorites, downloaded content, sync coordination, authentication sessions, navigation and your privacy choice. Theme/sound settings are remembered to provide the preference you select; they are not advertising profiles.
Firebase Authentication can persist sign-in state in its IndexedDB browser database and use browser storage on the authentication helper domain. Google sign-in can use Google’s own authentication cookies and storage when you choose that provider. Airbored’s consent controls do not disable storage necessary to sign in.
What is stored where
IndexedDB “airbored”: progress and pack metadata. IndexedDB “airbored-personal”: activity, journeys, favorites, published-content downloads, account/sync metadata and the current downloaded news edition.
LocalStorage: “theme”, “sound”, installation/prompt choices, account and email-link helper values, and “airbored:consent”. The consent record contains a consent version, policy version, chosen categories and timestamp. SessionStorage supports internal navigation; it is not an analytics session identifier.
Cache Storage: verified Airbored pages/scripts/icons, service-worker generations and pack assets. Firebase manages its own authentication persistence. These are not automatically sent to Airbored as cookies: only the supported account sync paths transfer local progress to Firestore.
Optional Analytics
Analytics is off by default. If allowed, Google Analytics can set “_ga” and “_ga_…” cookies to distinguish browsers and sessions. The app configures a one-year analytics-cookie lifetime; activity can renew it and browser restrictions can shorten it. Reporting data retention is a separate Google Analytics property setting that the operator must confirm.
The same Analytics permission gates local product-event recording and, together with the separate account improvement setting, its upload to Firebase. There are no separate Marketing or optional Functional categories because no such services were found in the audited app.
Change your choice
Choose Reject optional, Accept all or Manage preferences on the first visit. “Your privacy” lets you keep Analytics off or enable it. Cookie preferences in the footer reopens those controls at any time.
A current choice is remembered without a routine expiry prompt. A material policy or consent-purpose change invalidates it and asks again. If browser storage is blocked, your explicit choice applies only in the current tab and future visits may ask again.
Rejecting or withdrawing prevents new optional tracking, removes accessible Google Analytics cookies and clears local product events. The necessary games, authentication and downloads continue to work. Previously processed analytics is not retroactively erased by this switch.
Browser controls and offline consequences
You can also block cookies, clear site data or manage storage in your browser. These controls can remove saved games, flight history, cached editions, downloaded packs, authentication sessions and the saved consent choice. An installed PWA still depends on browser-managed storage.
Prepare downloads again online after clearing data or changing devices. A cloud account can restore only data that successfully synced; unsynced guest progress may be lost. External sites such as The Guardian and Google have their own browser-storage controls.
Your privacy controls
Settings includes profile, account export/deletion and device-data controls. Change optional tracking separately here.
Operator & contact
- Operator
- Legal identity awaiting confirmation.
- Country
- Awaiting confirmation.
- Service address
- Awaiting confirmation.
- Support & privacy
- Contact email awaiting confirmation. No unverified mailbox is listed.
Operator disclosure is incomplete until these details are confirmed. The description of the application and its privacy controls is implemented; no business identity or jurisdiction has been assumed.