Cookie notice
7. Cookies
7.1 Cookies are small files a website stores on your device. Under reg 6 of PECR, we need your consent for any cookie that is not strictly necessary for the service you asked for.
7.2 BoughtWell uses only strictly necessary cookies, so there is no cookie banner. If we ever add analytics or other non-essential cookies, we will ask first, and "Reject" will be as easy as "Accept".
| Cookie | Set by | What for | Lasts |
|---|---|---|---|
| Sign-in session (sb-…-auth-token) | BoughtWell (Supabase) | Keeps you signed in | Your session, refreshed while you use it |
| Saved sign-up (bw_apply) | BoughtWell | "Save and finish later" on sign-up | 30 days |
| __stripe_mid, __stripe_sid | Stripe, at checkout only | Fraud prevention for payments | 1 year; 30 minutes |
| Security cookies | Our hosting network | Bot and abuse protection | Up to 30 minutes |
7.3 Analytics. We use no advertising or social media tracking cookies, and no tracking pixels in our emails. If we measure visits, we use cookieless analytics that do not track you across sites.
7.4 Managing cookies. You can block or delete cookies in your browser settings. If you block the necessary ones, you won't be able to stay signed in.