Cookie Policy
Last updated 11 November 2026 · version 1.6
POP STUDIO a CWP Studio brand
Cookie Policy
1. Overview
CINDERWORDS CO.,LTD, trading as POP Studio, uses on ibepop.com only the cookies and local storage the site needs to work, plus one time-zone cookie. Nothing is used to track you. Personal data: see our Privacy Policy.
2. What we use
2.1 Set by POP Studio
| Name | Type | Purpose | Duration |
|---|---|---|---|
access_token | Necessary cookie | Keeps you signed in (short-lived signed token; HttpOnly, Secure) | 15 minutes, auto-renewed while active |
refresh_token | Necessary cookie | Renews your session without re-signing in; replaced on every use (HttpOnly, Secure) | Up to 30 days |
oauth_state | Necessary cookie | Protects "Sign in with Google" from forged requests; deleted after sign-in (HttpOnly, Secure) | Up to 10 minutes |
tz | Functional cookie | Shows dates (orders, Membership renewal) in your time zone | 1 year |
pop_cart | Necessary local storage | Remembers your cart on this device | Until checkout, removal or clearing browser data |
pop_viewed:[product] | Functional local storage | Counts a product view once a day in anonymous aggregate stats; holds only a date, never linked to you | Until you clear browser data (updated at most daily) |
2.2 Set by third parties (strictly necessary)
| Provider | Names (examples) | Purpose | Duration |
|---|---|---|---|
| Cloudflare (security, content delivery) | __cf_bm, cf_clearance, _cfuvid | Bot detection, security challenges, rate limits, attack protection | __cf_bm: 30 minutes; cf_clearance: as configured for the challenge; _cfuvid: browser session |
| Creem (checkout page only) | Set by Creem | Checkout session, payment security, fraud prevention | Per Creem's policies |
They follow their own privacy and cookie policies. We use no cookies from Google, Discord or social networks; our social links are plain links.
3. What we never use
Advertising or retargeting cookies, third-party analytics (e.g. Google Analytics), social tracking pixels or "like" buttons, or third-party fonts (ours are self-hosted).
4. Consent and control
- No consent banner is shown, because everything above is necessary or functional. We will ask for consent before ever adding analytics or marketing cookies.
- You can block or delete cookies and local storage in your browser at any time, but without necessary ones you cannot sign in, download files or check out.
- We honour Global Privacy Control where it applies; we do not sell or share personal data for advertising.
5. Changes and contact
We update this policy (and its "Last updated" date) when our cookies change. Questions: pop@cinderwords.com.