Cookie Policy
How we use cookies
Cookies and similar storage (such as your browser's local storage) hold small pieces of data on your device. We use essential ones to run Bench. We use optional ones only after you allow them in the cookie notice, and you can change that choice at any time with "Cookie settings" in the footer of every page.
We set no advertising cookies and use no cross-site tracking. Plausible and Cloudflare Web Analytics are cookieless, Google Analytics 4 sets two cookies, and all three wait for your consent.
Categories
- Essential: needed for the site to work, to keep you signed in, to remember your choices and to protect against abuse. Always on.
- Analytics (optional): counts page views so we know which pages are useful. Off until you allow it.
- Marketing (optional): records a partner referral when you arrive from a partner link. Off until you allow it.
Every cookie and storage item
| Name | Category | Where | Purpose | Duration |
|---|---|---|---|---|
| bl_consent | Essential | Cookie, all *.bizlegal-ai.com sites | Remembers your cookie choice and the policy version you saw | 180 days |
| <site>-theme / hub-theme / bl-theme | Essential | Browser storage, per site | Remembers light or dark theme | Until cleared |
| bl-sticky-lead-dismissed-until | Essential | Browser storage | Remembers that you closed a promotional badge | Until the stored date |
| ops_session | Essential | Cookie, bizlegal-ai.com | Keeps the operator dashboard signed in (staff only) | Session |
| sb-<project>-auth-token | Essential | Cookie, DocAI and TRACR | Keeps you signed in (Supabase) | Until you sign out or the session expires |
| tracr_login_next | Essential | Cookie, TRACR | Returns you to the page you wanted after sign-in | Minutes |
| bx_access | Essential | Cookie, BrainX | Proves your paid radar access | Duration of the subscription |
| cp_session | Essential | Cookie, CasePage | Keeps you signed in | Session period set at sign-in |
| sf_session | Essential | Cookie, SinceFiled | Keeps you signed in | Session period set at sign-in |
| forge-recent-pages, prr:*, dd_email | Essential | Browser storage, Forge and the hub tools | Remembers recent pages or the form you were filling in, on your device only | Until cleared |
| __cf_bm, cf_clearance | Essential | Cookie set by Cloudflare | Bot protection and security challenges | 30 minutes to 1 year |
| Plausible Analytics | Analytics (optional) | Script from plausible.io; sets no cookie | Counts page views without identifying you | No storage on your device |
| Cloudflare Web Analytics | Analytics (optional) | Script from static.cloudflareinsights.com; sets no cookie | Counts page views and measures page speed without identifying you | No storage on your device |
| _ga, _ga_SEERMBYM93 | Analytics (optional) | Cookies set by Google Analytics 4 (Google) on the BizLegal AI hub and FirmCited, after you allow analytics | Counts visits and pages. Google signals and ad personalisation are switched off, and it is not loaded when your browser sends Do Not Track or Global Privacy Control | Up to 2 years |
| biz_utm | Essential | Browser sessionStorage (not a cookie), hub and FirmCited | Remembers the campaign tags of the link you arrived on, and sends them only if you submit an email sign-up form | Until you close the tab |
| bz_aff | Marketing (optional) | Cookie, bizlegal-ai.com | Records the partner who referred you, so the partner can be credited | 90 days |
| PayPal / NOWPayments cookies | Set by the payment provider | On the provider's own site during checkout | Payment security and fraud prevention | See the provider's policy |
Your consent record
When you choose, we store the choice in the bl_consent cookie and log it on our server with the time, the policy version and a random identifier that does not identify you, so we can show what was agreed. Contact privacy@bizlegal-ai.com for a copy.
Managing cookies in your browser
You can also delete or block cookies in your browser settings. Blocking essential cookies may stop sign-in or checkout from working.
Changes
When this list changes in a way that needs new consent, the policy version changes and the cookie notice asks you again. Effective date: 2 October 2026.