Legal / 03
Cookie Notice
Last updated · September 2, 2026
B00 Inc. uses a small number of first-party cookies and browser storage keys in B00. We use no third-party advertising cookies, no cross-site trackers, and no session replay.
| What | Key | Category | Purpose | Lifetime |
|---|---|---|---|---|
| Supabase auth token | sb-…-auth-token | Strictly necessary | Keeps you signed in and identifies your session to the backend. | Until sign-out or expiry |
| Session cookie | issued by our server runtime | Strictly necessary | Authenticates requests and protects against cross-site request forgery. | Session |
| Theme preference | boxic.theme | Preferences | Remembers light, dark, or automatic appearance. | Current tab |
| Consent choice | boxic.consent.analytics.v1 | Strictly necessary | Remembers whether you accepted or rejected analytics. | Until cleared |
| In-memory project mirror | Tab memory only | Strictly necessary | Keeps the open workspace responsive. Project records and files are saved to the cloud; no persistent local project copy is kept. | Until reload, tab close, sign-out or account switch |
| Analytics session id | boxic.session.id | Analytics | Groups page views and consent-dependent journey milestones from one visit so we can measure aggregate product usage. | Session only |
Consent
Strictly necessary and preference storage is required for B00 to work and cannot be turned off in-product. Analytics is different: if you're in the EEA, the UK, or Switzerland, we collect nothing until you choose “Accept”. Choosing “Reject” means no page views are recorded and no session identifier is created. Elsewhere, analytics runs by default and you can turn it off below at any time.
Analytics detail
When enabled, we record the page path, referrer, coarse device information, viewport width, a per-visit session identifier, and milestone names such as signup started or onboarding completed. Page views are stored in our own database and pruned after 90 days. Milestones never include prompts, filenames, project contents, or account identifiers. It is never shared with ad networks and is not used to build a cross-site profile of you.
Managing storage yourself
You can clear cookies and site storage at any time in your browser settings. Doing so signs you out of B00 and resets your preferences. To remove data tied to your account, see the Privacy Policy.