Cookie Policy
Last updated: March 29, 2026
1. What Are Cookies
Cookies are small text files that websites place on your device to store information. They are widely used to make websites work properly, improve user experience, and provide information to site owners.
2. Cookies We Use
bglocation.dev uses only strictly necessary cookies required for authentication. We do not use any tracking, analytics, advertising, or third-party cookies.
| Name | Purpose | Type | Duration | HttpOnly | Secure |
|---|---|---|---|---|---|
| bgl_session | Authenticates you in the License Portal after magic-link login. Contains a signed JWT token with your email and customer ID. The token is signed (not encrypted), so these values are readable if the cookie is obtained. | Strictly necessary | 7 days | Yes | Yes (production) |
| bgl_admin_session | Authenticates administrators in the Admin Panel. Contains a signed JWT token with your email and admin ID. The token is signed (not encrypted), so these values are readable if the cookie is obtained. | Strictly necessary | 7 days | Yes | Yes (production) |
Both cookies are set only when you explicitly log in. They are HttpOnly (not accessible via JavaScript) and Secure (transmitted only over HTTPS in production). They use SameSite=Lax, which helps protect against cross-site request forgery (CSRF) as part of our overall security measures.
3. What We Do Not Use
- Analytics cookies — we do not use Google Analytics, PostHog, Plausible, or any other analytics service
- Advertising cookies — we do not serve ads or use retargeting
- Third-party tracking — we do not embed third-party trackers or social media pixels
4. Local Storage
We use browser localStorage (not a cookie) to remember that you have acknowledged this cookie notice. Specifically, we store a single string value under the key "bgl_cookie_consent_v1" to record that you have dismissed the cookie banner. This data stays on your device and is never sent to our servers.
5. How to Manage Cookies
You can control and delete cookies through your browser settings. Note that disabling our session cookies will prevent you from logging in to the License Portal or Admin Panel.
Most browsers allow you to:
- View what cookies are stored
- Delete cookies individually or in bulk
- Block cookies from specific or all websites
- Block third-party cookies (already irrelevant here)
Refer to your browser's help documentation for instructions on managing cookies.
6. Changes to This Policy
We may update this Cookie Policy if we introduce new cookies or change how we use existing ones. Changes will be posted on this page with an updated "Last updated" date.
7. More Information
For details on how we process personal data, see our Privacy Policy. If you have questions, contact us at hello@bglocation.dev.