Cookie Policy
Last updated: [DATE]
1. What cookies are, and how we use them
Cookies are small pieces of data a website asks your browser to store, then reads back later — for example, to keep you signed in between page loads, or to remember your language.
Blamewell keeps its cookie footprint small and split into four categories: strictly necessary, functional, analytics, and marketing. You control the last three from the "Cookie Preferences" link in the footer of every page, at any time.
2. Cookies we currently set
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
| Session cookie (httpOnly) | Strictly necessary | Keeps you signed in. Cannot be read by JavaScript. | Session, or until you sign out |
| CSRF token | Strictly necessary | Protects forms and account actions against cross-site request forgery. | Session |
| NEXT_LOCALE | Strictly necessary | Remembers which language you're viewing the site in. Recognized as an exempt, delivery-of-service cookie under EU guidance (e.g. CNIL), since it stores nothing beyond the language you selected. | 1 year |
| bw_consent | Strictly necessary | Stores your cookie preferences themselves, so we don't ask again every visit. | 1 year |
| blamewell_session | Strictly necessary | A readable marker that a sign-in exists, so the site does not ask the server about signed-out visitors. It contains no personal data and no credentials (English text). | Same as your sign-in (7+ days) or until you sign out |
We do not currently set any analytics or marketing cookies. If that changes, this table will be updated first, and any new cookie will only load after you've turned on the relevant category in Cookie Preferences.
3. Analytics and marketing (currently unused)
Blamewell does not currently run any analytics, advertising, or marketing script — no Google Analytics, no ad pixels, nothing. The "Analytics" and "Marketing" toggles in Cookie Preferences exist so you can make that choice in advance; turning them on today has no effect, since there is nothing in either category to load yet.
4. Your choices, and Global Privacy Control
You can change your cookie choices at any time from the "Cookie Preferences" link in the footer of every page. You can also block or delete cookies directly in your browser's settings, though doing so for the strictly necessary category will likely sign you out.
If your browser or a browser extension sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out of any sale or sharing of personal information under CCPA/CPRA and other applicable US state privacy laws, and set analytics and marketing to off automatically.
5. More about your data
This page covers cookies specifically. For what personal data we collect, how long we keep it, and your rights to access, export, or delete it, see our Privacy Policy — linked in the footer of every page.