Cookie Policy
Effective Date: 2026.06.10
This Cookie Policy explains how AB180 Inc. ("AB180", "we") uses cookies and similar technologies on the Airbridge website (www.airbridge.io). It describes what these technologies are, why we use them, and the choices you have. For how we process personal information more broadly, see our Privacy Policy.
Your choices
Outside the Republic of Korea, we ask for your consent before setting any analytics or marketing cookies. You can accept all, reject all, or choose by category — and you can change your decision at any time. Strictly necessary cookies do not require consent.
To review or change your choices, open (also available in the site footer). You can additionally control cookies through your browser settings; blocking some cookies may affect how the site works.
1. Strictly Necessary
Required for the site to function — language preference, security (CSRF), saving your consent choice, and keeping product experiences (such as A/B variants and report access you requested) consistent. These do not require your consent.
| Cookie | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| NEXT_LOCALE | AB180 Inc. | Stores the selected language/locale (en, ko, zh, vi, tr, es, ja). | 1 year | 1st-party |
| airbridge_geo | AB180 Inc. | Country detection set by middleware; powers regional logic and tracking suppression. | Session | 1st-party |
| ab_cookie_consent | AB180 Inc. | Stores the visitor's cookie consent choices per category. | 12 months | 1st-party |
| __Host-next-csrf | AB180 Inc. | CSRF protection and same-origin enforcement for /api/forms endpoints. | Session | 1st-party |
| ab_experiment_* | AB180 Inc. | A/B test variant assignment for a consistent experience across sessions. | 90 days | 1st-party |
| benchmark_* | AB180 Inc. | Persists benchmark report access state after a user-requested unlock. | 30 days | 1st-party |
2. Analytics
Help us understand how visitors use Airbridge so we can improve the site. Data is collected in aggregate. Outside the Republic of Korea, these cookies are set only with your consent — until then Google Analytics may receive cookieless, anonymized pings (Google Consent Mode v2) that do not store identifiers on your device.
| Cookie | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| _ga | Google LLC (Google Analytics 4) | Distinguishes unique users. | 2 years | 3rd-party |
| _ga_<container-id> | Google LLC (Google Analytics 4) | Persists GA4 session state. | 2 years | 3rd-party |
| amplitude_id_<api-key> | Amplitude, Inc. | Identifies the device for product analytics. | 10 years | 1st-party |
| amp_<api-key> | Amplitude, Inc. | Persists Amplitude session and event state. | 30 days | 1st-party |
| EXP_<api-key-prefix>_identity | Amplitude, Inc. (Web Experiment) | Keeps a visitor in the same A/B test variant across visits. | 12 months | 1st-party |
| sentry-trace | Functional Software, Inc. (Sentry) | Error and performance monitoring; correlates errors with sessions. | Session | 3rd-party |
3. Marketing
Used to measure ad campaign performance and show you relevant ads on other sites; includes our own mobile attribution (Airbridge Web SDK). Outside the Republic of Korea, marketing cookies are set only with your consent. To support aggregate measurement, Google, Meta, and LinkedIn may still receive a limited, restricted signal before consent (Consent Mode v2 / Limited Data Use); the remaining vendors load only after you opt in.
| Cookie | Provider | Purpose | Expiry | Type |
|---|---|---|---|---|
| ab_uid | AB180 Inc. (Airbridge Web SDK) | Identifies the device for attribution and conversion deduplication. | 1 year | 1st-party |
| airbridge_* | AB180 Inc. (Airbridge Web SDK) | Session-level attribution and UTM capture. | Up to 1 year | 1st-party |
| _fbp / _fbc | Meta Platforms, Inc. (Meta Pixel) | Browser/click identifiers for conversion tracking across Meta platforms. | Up to 2 years | 3rd-party |
| _gcl_* | Google LLC (Google Ads) | Conversion linker and click identifiers for ad-click attribution. | 90 days | 3rd-party |
| bcookie, li_sugr, UserMatchHistory, lidc, _li_ss | LinkedIn (Microsoft Corp.) | LinkedIn Insight Tag — member matching and ad-targeting. | Up to 1 year | 3rd-party |
| _rdt_uuid | Reddit, Inc. | Reddit Ads conversion attribution. | 90 days | 3rd-party |
| personalization_id, guest_id | X Corp. (X Pixel) | Personalization and ad-targeting identifiers for X. | 2 years | 3rd-party |
| NID | NAVER Corp. (Naver Pixel) | Conversion measurement for Naver Search/Performance Ads. | 6 months | 3rd-party |
| _kawlt, _kawltea, _kp_collector | Kakao Corp. (Kakao Pixel) | Kakao ad identifiers and pixel event routing for conversion attribution. | Up to 12 months | 3rd-party |
| _reb2buid, _reb2bgeo, _reb2bref, _reb2bsessionID, _reb2b* | Retention.com (RB2B) | Identifies business visitors from the United States (name, job title, company) for sales and marketing. Loads only for U.S. visitors with marketing cookies enabled; honors Global Privacy Control. | Up to 1 year | 1st-party |
4. International Data Transfers
Some providers process data outside your country under the legal bases below.
| Provider | Transfer Country | Legal Basis |
|---|---|---|
| Google LLC | United States | EU-U.S. Data Privacy Framework (DPF) + SCC |
| Meta Platforms, Inc. | United States | EU-U.S. Data Privacy Framework (DPF) + SCC |
| LinkedIn (Microsoft Corp.) | United States | EU-U.S. Data Privacy Framework (DPF) + SCC |
| Reddit, Inc. | United States | Standard Contractual Clauses (SCC) |
| X Corp. | United States | Standard Contractual Clauses (SCC) |
| Amplitude, Inc. | United States | Standard Contractual Clauses (SCC) |
| Functional Software, Inc. (Sentry) | United States | Standard Contractual Clauses (SCC) |
| NAVER Corp. | Republic of Korea | EU Adequacy Decision (2021) |
| Kakao Corp. | Republic of Korea | EU Adequacy Decision (2021) |
| AB180 Inc. | Republic of Korea | EU Adequacy Decision (2021) |
Contact
Questions about this policy? Contact our Security & Privacy Team at compliance@ab180.co.