Cookies Policy
Cookies Policy
Effective date: 30 June 2026
Last updated: 29 October 2026
1. About this Policy
This Cookies Policy explains how iStamp (“we”, “us”, “our”) uses cookies, browser storage, and on-device storage on our website at https://istamp.io (including merchant pages, join pages, stamp card pages, and Explore) and in the iStamp App for iOS and Android.
It should be read together with our Privacy Policy and Terms of Service.
In short: we only use what is needed to keep you signed in, remember your language, keep the Service secure, and make it load faster. We do not use advertising cookies, cross-site or cross-app tracking, or third-party analytics.
2. What are cookies and similar technologies?
- Cookies are small text files a website stores in your browser.
- Browser storage (such as local storage and the service worker cache) lets a website keep small amounts of data on your device, for example so it can load faster or work as an installable web app.
- On-device storage in a mobile app works the same way inside the app. Sensitive data such as sign-in sessions is kept in the secure storage provided by your phone (iOS Keychain or Android Keystore).
In this Policy we call all of these “cookies and similar technologies”.
3. Website — what we use
3.1 Strictly necessary
These are required for the Service to work. They cannot be switched off in our systems.
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-…-auth-token (may be split into numbered parts) | iStamp (via Supabase Auth) | Keeps Merchants, Staff, and Customers signed in, and protects accounts | Session; refreshed while you stay signed in, removed when you log out |
| Service worker cache | iStamp | Lets installed iStamp web pages load quickly and show the stamp card on a weak connection | Until updated by a new version or cleared by you |
3.2 Preferences
| Name | Provider | Purpose | Duration |
|---|---|---|---|
locale | iStamp | Remembers your language (English or Bahasa Malaysia) | 1 year |
istamp-pwa-install-dismissed (local storage) | iStamp | Remembers that you closed the “install app” banner so it is not shown again | Until you clear site data |
3.3 Analytics and advertising
We do not currently use analytics, performance-tracking, or advertising cookies on our website. If we add any in the future, we will update this Policy first and, where required by law, ask for your consent before setting them.
4. iStamp App — what we store on your device
The iStamp App does not use browser cookies, but it stores the following on your device:
| Data | Where | Purpose | Removed when |
|---|---|---|---|
| Sign-in session | iOS Keychain / Android Keystore (encrypted) | Keeps you signed in to your Customer Account | You log out or delete your account |
| Cached cards and Explore results | App storage | Opens My cards and Explore quickly, even offline | You log out, delete your account, or uninstall the app |
| Language choice | App storage | Remembers English or Bahasa Malaysia | You uninstall the app |
| Push notification token | Generated by your device; a copy is held on our servers only if you turn notifications on | Delivers promo reminders you opted into | You turn notifications off or delete your account |
The iStamp App does not include advertising SDKs, does not track you across other companies’ apps or websites, and does not use your device’s advertising identifier.
Permissions such as location and notifications are controlled by your device, not by cookies. You can change them at any time in your phone’s settings. Location is used only while the app is open, to show nearby shops, and is not saved to your account.
5. Third-party services
Some features hand you over to another company’s service. When that happens, that company’s own cookie and privacy policies apply:
- Sign in with Apple and Google Sign-In, if you choose them to log in
- Google Maps and Waze, when you tap a directions button
- Billplz (and Paddle, when available) on payment pages for Merchant subscriptions
- WhatsApp, when a Merchant opens a WhatsApp link
We do not control the cookies these services set.
6. How to manage cookies and storage
- Browser: you can block or delete cookies and site data in your browser settings. Blocking strictly necessary cookies will stop you from signing in. Deleting the
localecookie resets your language to your browser default. - Installed web app: clearing site data for https://istamp.io removes the service worker cache and the install-banner setting.
- iStamp App: logging out clears your session and cached data. Account → Delete account removes your Customer Account. Uninstalling the app removes everything stored by the app on your device.
- Device permissions: turn location or notifications on or off in iOS Settings → iStamp or Android Settings → Apps → iStamp.
7. Changes to this Policy
We may update this Cookies Policy when we change the technologies we use or when the law changes. We will post the new version on this page with an updated date, and give notice in the Service for material changes where appropriate.
8. Contact
Questions about this Policy: privacy@thinkingstudio.my
General support: admin.thinkingstudio@gmail.com
Malaysia entity: Thinking Studio (Malaysia) Sdn. Bhd., NO. 31-1, BLOK F,PLATINUM WALK, NO. 2, JALAN LANGKAWI, KUALA LUMPUR, WILAYAH PERSEKUTUAN
© 2026 iStamp. All rights reserved.