Cookie Policy

Last updated: 2026-09-26

This Cookie Policy explains how INSTA-BOT, operated by Nittish Baboria in India, uses cookies and similar browser storage. It should be read together with our Privacy Policy.

1. What are cookies and similar technologies?

Cookies are small text files stored on your device. We also use comparable technologies such as browser localStorage and sessionStorage for the same kinds of purposes described below.

2. Categories we use

Strictly necessary (always on) — required to operate the service. These do not require consent under the DPDP Act because they are essential for authentication, security, and the Instagram connection flow.

  • Session cookie — keeps you signed in (NextAuth session).
  • meta_oauth_state — short-lived signed cookie used only while you connect an Instagram account via Meta OAuth.

Analytics (optional, consent-based) — help us understand how public pages are used so we can improve the product. We do not use third-party advertising or cross-site tracking cookies.

  • ib_analytics_consent (localStorage) — stores whether you accepted or declined optional analytics.
  • ib_vid (localStorage) — pseudonymous visitor identifier, only if you accept analytics.
  • ib_sid / ib_sid_ts (sessionStorage) — session identifiers for analytics, only if you accept analytics.

When analytics is enabled, our servers may also receive page path, referrer, UTM parameters, hashed IP address, browser user-agent, and approximate location derived from request headers (country/region/city where available from our host).

3. How to manage your choices

On your first visit to public pages, a banner lets you choose Essential only or Accept analytics. You can change this at any time on the Consent page. Declining analytics removes stored visitor/session identifiers where possible.

You can also clear cookies and site data through your browser settings. Doing so will sign you out and may reset your analytics choice.

4. Third-party cookies

If you sign in with Google or connect Instagram through Meta, those providers may set their own cookies on their domains during the OAuth flow. We do not control those cookies; please refer to Google's and Meta's privacy policies.

5. Contact

Questions about this policy: nittishbaboria123@gmail.com.