Cookie Policy

1. About this policy

A cookie is a small file a site stores in your browser and reads back on the next request. We use them only where the site cannot work without them or where they remember something you asked us to remember. We do not use cookies to build a profile of you, and we do not share cookie data with anyone for their own purposes.

This Help Center itself is a public, cookie-less site: reading help articles sets no cookie at all.

2. What we set

• The session cookie — identifies your signed-in session on a Bodek app, and carries the token that proves a form submission came from our own page rather than from another site. Without it you cannot sign in. It expires when the session ends.
• "Remember me" token (remember_token) — if you ask us to keep you signed in, a long-lived token that signs you back in on that browser. You can end it by signing out, or by signing that device out from your account settings.
• Account switcher (bodek_accounts) — remembers which Bodek accounts you have signed into on this browser, so you can switch between them without signing in again. Signing out removes the account from it.
• Payment pages — our payment processor sets its own cookies on the page where you enter card details, which it uses for fraud prevention and to make the card fields work. Its own privacy policy governs them.

None of these are used for advertising, and we set no tracking cookie for a third party. Two things people often assume are cookies are not: the "don't ask me again on this browser" state for two-step verification is a coarse record of your browser and network range kept on our side, not in your browser, and your light or dark theme choice is saved to your account so it follows you between devices.

3. Local storage and app storage

Our web apps also use your browser's local storage, session storage and caches to hold things that belong on your own device: a draft you have not sent, the queue and progress of an upload, a cached list or thumbnail so a page redraws quickly, and interface preferences such as the sort order and layout you last chose in a page. The mobile and desktop apps keep the equivalent on the device, plus the tokens that keep you signed in and, where you enabled it, cached copies of files you opened. None of it is sent anywhere for tracking, and clearing site data or signing out removes it.

4. Third-party requests

Two kinds of request leave our pages even though they set no tracking cookie for us:

• A public code CDN serves the Bootstrap stylesheet and the icon font our pages use. Fetching a file necessarily tells that network your IP address and browser; it receives no account information from us.
• Our payment processor's script loads only on pages where you enter card details, so that card numbers never touch our servers.

We do not embed social buttons, advertising pixels, session recorders, heat maps or third-party analytics anywhere.

5. Your controls

Your browser can block or delete cookies and site data, and can be set to do so automatically. Blocking the necessary cookies above will prevent you signing in or submitting forms, and clearing them will sign you out and forget your preferences and trusted devices. You can also sign out individual devices and sessions from your account settings at accounts.bodek.us. Because we do not track you across sites, there is nothing for a "Do Not Track" or Global Privacy Control signal to turn off; we honor it as a privacy-rights signal where law requires.