1. Who this is from
This Cookie Policy is issued by Jasmine Entertainment FZE (trade licence 4422193.01), Sharjah Publishing City, Business Centre, Sharjah, United Arab Emirates — the company behind Bustan.
Questions: support@getbustan.com or +971 50 749 3651.
It should be read with our Privacy Policy and Terms & Conditions.
2. What this covers
- getbustan.com and its subdomains — the marketing page, the waitlist form, and the legal and crawler pages.
- The Bustan mobile app, in Section 6, which covers on-device storage rather than cookies.
It does not cover other people's websites, including the bank pages we cite. Those set their own cookies under their own policies, and we have no control over them. Follow a link off our site and you are in someone else's hands.
3. What cookies and similar technologies are
A cookie is a small text file a website asks your browser to store, and which your browser sends back on later visits. Similar technologies — localStorage, sessionStorage, pixels, and device storage — do comparable things by different means.
They are commonly grouped as:
- Strictly necessary — the site cannot function or be kept secure without them. These generally do not require consent.
- Functional — remember preferences such as language or theme.
- Analytics / performance — measure how a site is used.
- Advertising / targeting — build profiles to show ads and follow you across sites.
Bustan sets the first category on its website, and the last category only with your consent, for one purpose: measuring our own advertising (Section 4.5). We use no analytics.
4. Cookies on getbustan.com
4.1 What we set ourselves
Only your cookie choice. The website has no login, no shopping basket, no session, and no analytics script. The one thing we store ourselves is a single localStorage entry named bustan-consent, holding the word accepted or rejected, so that we do not ask you again on every page. It contains nothing else and is never sent to us. Clear your site data and it is gone, and the banner will ask once more.
4.2 What Cloudflare may set
Our website and API run on Cloudflare, which protects them from bots, abuse, and denial-of-service attacks. Cloudflare may set the following on our behalf:
| Cookie | Set by | Purpose | Type | Typical lifetime |
|---|---|---|---|---|
__cf_bm | Cloudflare | Bot management. Distinguishes a human browser from an automated one so that attacks can be filtered out. | Strictly necessary | Around 30 minutes |
cf_clearance | Cloudflare | Records that you passed a security challenge, so you are not challenged repeatedly. Only set if a challenge was shown to you. | Strictly necessary | Up to 1 year |
__cflb | Cloudflare | Load balancing — keeps a request series on one server. Only set where load balancing is in use. | Strictly necessary | Session, up to 24 hours |
These carry no advertising data, no profiling, and no cross-site tracking. Cloudflare acts as our processor for them and does not use them to build an advertising profile of you. Cloudflare's own documentation on these cookies is published at developers.cloudflare.com.
Because they are strictly necessary for security, they are set without a consent prompt — this is the standard treatment for essential cookies, and blocking them may mean the site refuses to load or challenges you repeatedly.
4.3 Staff-only
Our internal administrative route sits behind Cloudflare Access, which sets an authorisation cookie for our own staff when they sign in. It is never set for members of the public visiting the site.
4.4 What we do not use
To be explicit, getbustan.com uses none of the following:
- Google Analytics, or any other web analytics on the site;
- Google Ads, TikTok Pixel, LinkedIn Insight Tag, or any advertising pixel other than the Meta Pixel described in Section 4.5;
- re-targeting or remarketing audiences built from your visit;
- social media share or embed widgets that set cookies;
- data broker, identity resolution, or fingerprinting scripts;
- session replay or heatmap tools.
Web fonts are loaded from Google Fonts and Fontshare. A font request tells the font provider your IP address and the page you are on, as any download does, and sets no cookie.
4.5 The Meta Pixel, only with your consent
We advertise Bustan on Facebook and Instagram. To know whether an advert actually brought anyone here, and to stop paying for the ones that do not, we use the Meta Pixel on getbustan.com. It is provided by Meta Platforms, Inc. and reports into the same Meta dataset the App's advertising SDK uses (Privacy Policy Section 3.13), so that a visit to this site, an install and a subscription can be recognised as one journey.
It does not load until you press Accept. Before that, no script from Meta is on the page, no cookie is set, and nothing about your visit reaches Meta.
If you accept, the pixel:
- sets a first-party cookie named
_fbp, a random browser identifier, for up to 90 days, and reads a_fbccookie if you arrived by clicking a Meta advert; - sends Meta the page you viewed, and a "viewed content" event when you tap an App Store link, together with your IP address, browser information, and those cookie values;
- may, if you are logged in to Facebook or Instagram in the same browser, allow Meta to match the visit to your account under Meta's own privacy policy, over which we have no control.
It never sees your email address, and nothing you do inside the App is sent through it. Meta may use what the pixel collects for its own purposes as an independent controller, described in its Privacy Policy and Cookies Policy.
To refuse or withdraw: press Reject on the banner, or open "Cookie settings" in the footer at any time and press Reject there. Withdrawing stops the pixel from loading on every later page; to remove the _fbp cookie it already set, clear cookies for getbustan.com in your browser.
5. If this changes
We may in future add privacy-respecting product analytics to the website — the same kind, and the same closed event allowlist, that we describe in Section 3.9 of the Privacy Policy.
Whatever we add, the rules stay the same as for the pixel:
- we will update this page first;
- the consent banner will let you accept or reject it, with reject being as easy as accept, and no pre-ticked boxes;
- nothing non-essential will be set before you choose;
- you will be able to change your mind at any time;
- we will not build re-targeting audiences or follow you across other sites.
6. The mobile app
The Bustan mobile app does not use cookies. Apps do not work the way browsers do. Instead the App stores data directly on your device, in the App's own private storage, which iOS keeps isolated from other apps and removes when you delete the App.
| Stored on your device | Why |
|---|---|
| Anonymous identifier — a random UUID generated at first launch | Attaches your cards, settings, and purchases to you without us knowing who you are |
| Cached catalog bundle — the signed card and benefit database | So the picker and best-card answers work offline, with no network call and nothing sent to us |
| Your settings — notification preferences, quiet hours, timezone | So the App behaves as you set it |
| Purchase state managed by the Apple and purchases SDKs | So the App knows what you have paid for, including offline |
This storage is on your device. Deleting the App removes it. See the Privacy Policy for what is separately held on our servers, and how to delete that.
The App contains no advertising SDK, no tracking SDK, and no App Tracking Transparency prompt, because there is nothing for it to ask permission for.
7. How to control cookies
The banner and the footer. The banner at the bottom of the page is where you accept or reject the Meta Pixel. "Cookie settings" in the footer of every page reopens it, so you can withdraw an earlier Accept in one tap. Neither loads anything before you choose.
Beyond that, you remain in control of your browser.
Browser settings. Every major browser lets you view, block, and delete cookies:
- Safari — Settings → Privacy
- Chrome — Settings → Privacy and security → Third-party cookies
- Firefox — Settings → Privacy & Security
- Edge — Settings → Cookies and site permissions
Private browsing discards cookies when you close the window.
Blocking Cloudflare's security cookies may break the site. You may be challenged repeatedly, or be unable to load pages at all. That is a consequence of how bot protection works, not a choice we made about you.
Do Not Track and Global Privacy Control. We honour both. If your browser sends either signal, we treat it as a refusal: the banner does not appear and the Meta Pixel never loads, without you having to do anything.
On the app, use iOS Settings to control notification permission, and the App's own settings for notification kinds and quiet hours. To remove on-device storage, delete the App.
8. Legal basis
Strictly necessary cookies are set on the basis of our legitimate interests in keeping the website secure and available, under Article 4 of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. The Meta Pixel, and any non-essential technology we add in future, is set only on the basis of your consent, freely given and as easy to withdraw as to give.
9. Changes to this policy
We will update this page whenever the technologies we use change, and always before a new technology is deployed, not after. The "Last updated" date and version number at the top tell you where you stand.
- 1.1 — 14 September 2026. Added the Meta Pixel behind a consent banner (Section 4.5), the
bustan-consentstorage entry that remembers your choice (Section 4.1), the footer "Cookie settings" control, and honouring of Global Privacy Control and Do Not Track. Nothing was added that loads before you choose. - 1.0 — 23 August 2026. First version.
10. Contact
| support@getbustan.com | |
| Phone / WhatsApp | +971 50 749 3651 |
| Post | Jasmine Entertainment FZE, Sharjah Publishing City, Business Centre, Sharjah, United Arab Emirates |
| Trade licence | 4422193.01 |
See also: Privacy Policy · Terms & Conditions