Cookies and On-device Storage
Updated · Version 6
brandslabeg.com stores very little on your device, and nothing for advertising or tracking. This notice lists every item, with nothing left out.
1. The choice you were offered
The first time you open this site, a small sheet rises from the bottom of the page with two buttons of equal weight:
- Only what's needed: nothing beyond the items in section 2 below. This is also what the × and the Escape key record. It is never read as agreement.
- Allow page counts: the same, plus the anonymous page count described in section 3.
Nothing in section 3 runs until you choose it. The sheet blocks no part of the page, and the site works exactly the same whether you answer or not. Your answer is stored on your own device as bl:consent, together with the version of this notice it answered, so we can honour it and prove it was given.
Change your choice. This re-opens the same sheet with the same two buttons, so taking your permission back costs exactly what giving it cost.
2. What we store, whatever you choose
Every item here is needed for the part of the site you asked for, or for its security. None of it is used to profile you, and none of it is shared.
| Name | Where it lives | Purpose | Lifetime |
|---|---|---|---|
Language choice (bl:lang) |
Your browser | Remembers whether you read the site in English or Arabic. Set by your own click on the language switch, and never sent to us. | Until you clear your browser |
Your reading position (bl:y:…) |
Your browser, this tab only | Returns you to where you were when you reload a page or come back to it. Never sent to us. | Until you close the tab |
Your unsent draft (bl:draft:…) |
Your browser | Keeps what you typed in a form, the step you were on and the files you already attached, so a reload or a closed tab loses nothing. Never sent to us; forgotten the moment you send the form, or after 7 days. | Until you send it, or 7 days |
Your last reference (bl:last-ref) |
Your browser, this tab only | Shows you the reference number of the request you just sent, so you do not have to write it down. Never sent to us. | Until you close the tab |
Your choice (bl:consent) |
Your browser | The answer you gave in section 1, and the version of this notice you answered. | Until you clear your browser, or until this notice changes version |
Public settings (bl:config) |
Your browser, this tab only | Holds the public settings the forms need, such as the key for the anti-abuse check. | 5 minutes |
Session cookie (__Host-bl_session) |
A cookie | Keeps the factory's own people signed in on their own pages. Never set for a visitor. | 30 days, or 7 days without use |
Device cookie (__Host-bl_dev) |
A cookie | Lets the sign-in recognise a browser that signed in before, so it is not treated as a new device. Set at the first sign-in attempt at a staff door, whether or not the attempt succeeds. | 400 days |
Upload pass (__Host-bl_up) |
A cookie | Set when the first file of a quote request passes the anti-abuse check, so the rest of that brief's files upload without another check. Tied to a one-way hash of your network address, never to you. | 1 hour |
| Anti-abuse check (Cloudflare Turnstile) | Cloudflare's own domain | Protects the forms from automated abuse. It runs only on the pages that carry a form, under Cloudflare's own notice. | Cloudflare's own |
Bot cookie (__cf_bm) |
A cookie set by Cloudflare, which hosts the site | Tells Cloudflare's bot protection that the requests of one browser belong together, so automated traffic is told apart from people. It holds an encrypted bot score and a session marker, nothing about you. | 30 minutes without activity |
Challenge cookie (cf_clearance) |
A cookie set by Cloudflare | Set only if Cloudflare asks your browser to prove it is a browser; it remembers that the check passed so it is not asked again. | 30 minutes |
3. What runs only if you allow it
The page count. One small message per page you open, sent to our own server and forwarded to Google Analytics so we can see which pages are read and in which language. It carries the page address, the language, the page that sent you and the page title. It sets nothing on your device, and the identifier it uses is a one-way hash that changes every day and is never written down anywhere. On a page reached by a personal link of yours, the address is shortened before it is sent, so your link is never part of it.
This is the only item on the whole site that asks for your permission, and it is off until you give it.
4. What we never do
No advertising. No cross-site identifiers. No profiles. No selling or sharing of anything on this page. No cookie wall: refusing costs you nothing.
5. Third parties
Cloudflare, for the anti-abuse check and the security of the site. Google, for the page count in section 3 and only if you allowed it. When you join a meeting on Google Meet, Google's own pages apply Google's notices, not ours.
6. Your control
You may clear or block all of this in your browser at any time, and you may change your answer with the link in section 1. The public site keeps working without any of it. Only the sign-in for the factory's own pages needs its cookies.
7. Changes
Each version carries a date and a version number. A new version replaces the old one as a new document, and the sheet in section 1 is shown again so your choice always answers the notice you were actually given.
The English text governs if the two languages ever differ.