IBOMEA s.r.o.
Company Identification Number (IČO): 14071312
Registered Address: Hasova 3091/2, Modřany, 143 00 Praha, Czech Republic
Website: https://ibomea.com
Privacy Contact: support@ibomea.com
Effective Date: 31 July 2026
Last Updated: 31 July 2026
1. The short version
We do not use advertising cookies, analytics cookies, or tracking pixels on this website. There is no Google Analytics, no tag manager, and no social media pixel.
The only things we store on your device are the ones needed to keep you signed in and to remember the settings you chose. Because those are strictly necessary or set at your request, we do not ask for your consent to them, and there is no consent banner on this site. We do have to tell you about them, which is what this page is for.
The mobile app is different in one respect, and section 6 covers it.
2. What we store on this website
| Name | Type | Purpose | Party | Duration |
| --- | --- | --- | --- | --- |
| auth_session | Cookie | Keeps you signed in to your IBOMEA account. Signed and HttpOnly, so it cannot be read by scripts in your browser. | First party | 7 days |
| ibomea_login_mfa | Cookie | Records that you completed two-factor authentication for this sign-in, so you are not asked again on every page. Signed and HttpOnly. | First party | 7 days |
| ibomea-theme | Local storage | Remembers whether you chose light or dark appearance. | First party | Until you clear it |
| ibomea_lang | Local storage | Remembers which of our 21 languages you chose. | First party | Until you clear it |
All four are set by ibomea.com. None of them is shared with anyone, used to build a profile of you, or used for advertising.
3. Why we do not ask for your consent
Under Article 5(3) of the ePrivacy Directive, as implemented in the Czech Republic by section 89(3) of Act No. 127/2005 Coll., consent is not required for storage that is strictly necessary to provide a service you asked for.
Keeping you signed in is strictly necessary to provide an account. Remembering your two-factor step is part of the same sign-in you requested. Your theme and language are settings you chose yourself, and storing them is how we honour that choice.
None of the four is used for any other purpose, so none of them needs consent. We still have to inform you about all of them, which is why they are listed above in full rather than described in general terms.
4. What we do not do
We do not set advertising cookies on this website. We do not use analytics or audience measurement. We do not use social media pixels or share buttons that track you. We do not sell or share personal data for cross-context behavioural advertising.
Our content security policy restricts what the site may connect to at all: our own servers, our API, our sign-in provider, and our error reporting service. There is no technical route by which a tracker could load on this site without us adding it and updating this page.
5. Error reporting
If something breaks, we send a report to Sentry so we can fix it. That report contains the error and limited technical context. Before it leaves your browser we strip request headers, cookies and query strings, and remove anything that looks like an email address or a login token.
Error reporting does not identify you and is not used to track you between visits or across sites.
6. Advertising in the mobile app
The website carries no advertising. The Ideal Body Measurements mobile app does, in one place: a free user may choose to watch an optional rewarded video advertisement to unlock a calculation. You never have to watch one.
Those advertisements are served by Google AdMob and use your device's advertising identifier, which is not a cookie but works in a comparable way.
In the EEA, the United Kingdom and Switzerland we show Google's consent message before any advertisement is requested. If you do not consent to personalised advertising, we request non-personalised advertisements only. You can change your choice at any time in the app's advertising settings.
No measurement, body composition, gender or date-of-birth data is ever sent to the advertising provider.
7. Controlling storage yourself
You can delete cookies and local storage for this site at any time through your browser settings, and you can block cookies entirely. If you delete or block auth_session, you will be signed out and will not be able to sign back in until you allow it again, because it is the mechanism that keeps you signed in.
On mobile, you can reset or limit your advertising identifier in your device settings: on iOS under Privacy and Security, then Tracking; on Android under Settings, then Google, then Ads.
8. Changes to this notice
If we add anything that stores data on your device, we will update this page before it goes live. If we ever add something that is not strictly necessary, we will ask for your consent first, and refusing will be exactly as easy as agreeing.
9. Contact
Questions about this notice: support@ibomea.com
See also our Privacy Policy for how we handle personal data generally, and our Terms of Service.