Cookie Policy
Last updated: April 10, 2026
1. What Are Cookies
Cookies are small text files that websites place on your device to store information. They are widely used to make websites work properly, improve user experience, and provide information to site owners.
2. Strictly Necessary Cookies
bglocation.dev uses strictly necessary cookies required for authentication. These cookies are always active and do not require consent.
| Name | Purpose | Type | Duration | HttpOnly | Secure |
|---|---|---|---|---|---|
| bgl_session | Authenticates you in the License Portal after magic-link login. Contains a signed JWT token with your email and customer ID. The token is signed (not encrypted), so these values are readable if the cookie is obtained. | Strictly necessary | 7 days | Yes | Yes (production) |
| bgl_admin_session | Authenticates administrators in the Admin Panel. Contains a signed JWT token with your email and admin ID. The token is signed (not encrypted), so these values are readable if the cookie is obtained. | Strictly necessary | 7 days | Yes | Yes (production) |
Both cookies are set only when you explicitly log in. They are HttpOnly (not accessible via JavaScript) and Secure (transmitted only over HTTPS in production). They use SameSite=Lax, which helps protect against cross-site request forgery (CSRF) as part of our overall security measures.
3. Analytics
With your consent, we use Vercel Web Analytics to understand how visitors use our website. Vercel Analytics is a privacy-focused, cookieless service — it does not set any cookies, does not use localStorage, and does not fingerprint visitors.
Data collected by Vercel Analytics:
- Page views and navigation paths
- Referrer URL (how you arrived at our site)
- Country and browser type (derived from headers, not cookies)
- Device type (desktop, mobile, tablet)
No personally identifiable information (PII) is collected. IP addresses are not stored by Vercel Analytics. Data is sent via lightweight beacon requests and is aggregated — no individual visitor profiles are created.
Analytics data is only collected when you click "Accept all" on the cookie banner. If you select "Essential only", no analytics data is collected. You can change your preference at any time using the button below or the "Manage cookie preferences" link in the footer.
4. What We Do Not Use
- Advertising cookies — we do not serve ads or use retargeting
- Third-party tracking — we do not embed third-party trackers or social media pixels
- Fingerprinting — we do not use browser or device fingerprinting techniques
5. Local Storage
We use browser localStorage (not a cookie) to remember your cookie preferences. Specifically, we store a JSON object under the key bgl_cookie_consent_v2 containing your consent choices (necessary cookies, analytics) and a timestamp. This data stays on your device and is never sent to our servers.
6. How to Manage Cookies
You can control and delete cookies through your browser settings. Note that disabling our session cookies will prevent you from logging in to the License Portal or Admin Panel.
Most browsers allow you to:
- View what cookies are stored
- Delete cookies individually or in bulk
- Block cookies from specific or all websites
- Block third-party cookies (already irrelevant here)
Refer to your browser's help documentation for instructions on managing cookies.
7. Changes to This Policy
We may update this Cookie Policy if we introduce new cookies or change how we use existing ones. Changes will be posted on this page with an updated "Last updated" date.
8. More Information
For details on how we process personal data, see our Privacy Policy. If you have questions, contact us at hello@bglocation.dev.