Cookie Policy
Barbads.com uses cookies and similar technologies to run the site and — only with your consent — to measure audience and personalise content.
Last updated: 28 October 2026.
1. Who is responsible
Barbads.com is operated by FWI Editions, a French single-member limited liability company (EURL) with share capital of €[CAPITAL], registered with the Trade and Companies Register (RCS) of [VILLE] under number [SIREN]. Registered office: [ADRESSE]. Publication director: [NOM]. VAT: [TVA]. The website is hosted by Lovable on Cloudflare infrastructure (global network). The database is provided by Supabase; region: [RÉGION À CONFIRMER]. Some providers may process data outside the European Union — see the Privacy Policy for transfers and safeguards. The GDPR, the EU ePrivacy rules and the French Data Protection Act apply, as enforced by the CNIL.
For data-protection questions: privacy@barbads.com.
2. What is a cookie?
A cookie is a small text file stored on your device by your browser when you visit a site. We also use similar technologies (localStorage, sessionStorage, pixels). In this policy, the word “cookie” covers all of them.
Cookies fall into two groups:
- Strictly necessary — required to deliver a service you explicitly requested (logging in, keeping a basket, security). No consent is needed.
- Non-essential — audience measurement, personalization and marketing. Set only after you accept them.
3. Your choice
On your first visit, a banner lets you Accept all, Reject all, or set detailed preferences. Rejecting is as easy as accepting. Your choice is stored for 6 months; after that, we ask again.
4. Cookies we use
4.1 Strictly necessary (always on)
| Name | Purpose | Provider | Lifetime |
|---|---|---|---|
sb-*-auth-token | Keep you signed in | Barbads (Supabase) | 12 months |
barbads_cookie_consent | Remember your cookie choice | Barbads | 6 months |
barbads_currency | Remember BBD / USD display | Barbads | 12 months |
barbads_referral | Remember the friend who invited you when you use their referral link; strictly functional, never shared with third parties | Barbads, first-party | 30 days |
__cf_bm / cf_clearance | Bot protection, DDoS mitigation | Cloudflare | 30 min – 12 months |
__stripe_mid | Fraud prevention during card payment | Stripe (Stripe Payments Europe Ltd., Ireland) | 12 months |
__stripe_sid | Fraud prevention during card payment | Stripe (Stripe Payments Europe Ltd., Ireland) | 30 minutes |
m (m.stripe.com) | Secure payment form and fraud detection | Stripe (Stripe Payments Europe Ltd., Ireland) | Up to 2 years |
4.2 Audience measurement (consent required)
| Name | Purpose | Provider | Lifetime |
|---|---|---|---|
_pa_* | Aggregated, anonymized traffic statistics | Barbads first-party analytics | 13 months max |
We use first-party daily aggregate counters, not individual event logs. No visitor identifier or IP address is sent to our analytics counters. Without audience-measurement consent, only sessions and page views are counted; browser-only visitor flags and other audience metrics require consent.
Marketing
Optional advertising measurement and optimisation with Google Ads, Meta (Facebook and Instagram) and Microsoft Ads. Shares click identifiers and successful conversion types, without customer matching. First-party attribution lasts 30 days. Withdraw anytime in Cookie settings.
Advertising tags are optional, disabled until configured and activated, and loaded only after explicit marketing consent. They may receive successful conversion types (account creation, publication, boost, Pro subscription, paid job, stay request and activity booking), without contact data, customer matching or booking details. Google uses Consent Mode v2 with denied defaults. We retain the dated, versioned consent choices, region and any withdrawal; a first-party visitor reference links that evidence. Change or withdraw your choice at any time in Cookie settings using the cookie preferences link or button. Withdrawal stops new reporting and clears active attribution, without undoing earlier permitted reports. Events blocked before acceptance are not replayed.
| Name | Purpose | Provider | Lifetime |
|---|---|---|---|
| Promotional personalization | Show relevant boosted listings & professional offers | Barbads | 6 months |
| Social embeds (when shown) | Play embedded videos / share buttons | YouTube, Meta, X | Up to 13 months |
barbads_ad_attribution | Attribute successful conversions to advertising clicks (UTM, gclid, fbclid, msclkid) | Barbads, first-party | 30 days |
_gcl_aw, _gcl_au | Store advertising click information and measure conversions | Google Ads | 90 days (Google cookie reference) |
_fbp | Browser identifier for Pixel measurement | Meta (Facebook & Instagram) | Provider-set cookie expiry; not yet verified on this site |
_fbc | Associate a conversion with a Facebook or Instagram ad click | Meta (Facebook & Instagram) | 90 days (Meta click-cookie guidance) |
_uetvid, _uetsid | Visitor and session identifiers for UET conversion measurement | Microsoft Ads | Provider-set visitor/session cookie expiry; not yet verified on this site (Microsoft UET guidance) |
| Google Ads tag | Advertising conversion measurement and optimisation | Google Ads | Loaded for the page visit after consent; related cookies listed below |
| Meta Pixel | Advertising conversion measurement and optimisation | Meta (Facebook & Instagram) | Loaded for the page visit after consent; related cookies listed below |
| Microsoft UET tag | Advertising conversion measurement and optimisation | Microsoft Ads | Loaded for the page visit after consent; related cookies listed below |
5. Third parties & international transfers
Some providers may process data outside the European Economic Area (e.g. the United States or Barbados). In that case, we rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework, to maintain an equivalent level of protection.
6. How long we keep cookie data
Consent choice: 6 months. Non-essential cookies and the data they generate: 13 months maximum, as recommended by the CNIL.
7. Manage cookies in your browser
You can also block or delete cookies directly in your browser:
Disabling strictly necessary cookies may break sign-in, payments and other core features.
8. Your rights
Under the GDPR, you can access, rectify, erase, restrict or port your data, and object to its processing. Write to privacy@barbads.com. You may also lodge a complaint with the French CNIL (cnil.fr) or the Data Protection Commissioner of Barbados.
9. Updates
We may update this policy to reflect new tools or legal changes. The “Last updated” date above always reflects the current version. Material changes trigger a fresh consent request.
10. Contact
Questions? privacy@barbads.com — or see our privacy policy and legal notice.