Legal
Cookie Policy
Last updated: October 3, 2026
Not legal advice. These documents describe our good-faith practices but have not been reviewed by an attorney.
Our approach
Cookies and browser storage are small pieces of data a website keeps on your device. We use the ones the service needs, and nothing for analytics or advertising until you say yes. If you choose “Only necessary”, no analytics or advertising tag is loaded at all.
Necessary (always on)
Sign-in, security, your booking and payment, and remembering your choice. These can't be switched off here; blocking them in your browser stops sign-in and booking from working.
| Name | Set by | Why | How long |
|---|---|---|---|
| authjs.session-token (and __Secure- variant) | BluePawSky | Keeps you signed in | With "Keep me signed in" checked: 30 days without use, 90 days at most. Unchecked (and staff accounts): 24 hours without use, 7 days at most. Ends when you sign out. |
| bps-keep-signed-in | BluePawSky | Carries your "Keep me signed in" choice through Google sign-in | 10 minutes |
| authjs.csrf-token, authjs.callback-url | BluePawSky | Protects sign-in forms; returns you to the right page | Session |
| bps_cookie_consent (browser storage) | BluePawSky | Remembers your cookie choices | Until you change or clear it |
| bps_booking_reservation_id (tab storage) | BluePawSky | Keeps a booking in progress if you reload | Until the tab closes |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention on payment pages | Up to 1 year / 30 minutes |
Remembering small choices and support chat
Convenience settings stored on your device (they are never sent to analytics or advertising tools), and services you see on the page: our self-hosted live chat on public pages, Google sign-in if you use it, and the Google map on the search page.
| Name | Set by | Why | How long |
|---|---|---|---|
| bps_announcement_*, bps_install_card_dismissed, bps_push_prompt_dismissed, bps_preferred_rate_dismissed, bps_story_seen | BluePawSky | Remembers cards you closed and Stories you watched | Until you clear browser data |
| bps_internal | BluePawSky | Marks our own staff devices so they are never counted as visitors | Until cleared |
| cw_conversation and Chatwoot widget storage | BluePawSky (self-hosted chat) | Keeps a live-chat conversation going on public pages | Up to 1 year |
| Google sign-in and Google Maps | Only if you sign in with Google, or on the search page map | Set by Google |
Analytics (optional, off until you allow it)
| Name | Set by | Why | How long |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics | Counts visits and booking steps without identifying you | Up to 2 years |
| bps_attr_first, bps_attr_last, bps_evt_* (browser storage) | BluePawSky | How you found us, and avoiding double counts | 90 days / this tab |
Marketing (optional, off until you allow it)
Only used if we advertise. We never send these services your name, email, phone, address, messages or pet details.
| Name | Set by | Why | How long |
|---|---|---|---|
| _gcl_au, _gcl_* | Google Ads | Whether an ad led to a booking | Up to 90 days |
| _fbp, _fbc | Meta | Whether a Facebook or Instagram ad led to a booking | Up to 90 days |
| _ttp, ttcsid* | TikTok | Whether a TikTok ad led to a booking | Up to 13 months |
Changing your mind
Use Cookie preferences (above, in the site footer, or in Account in the app). Turning a category off takes effect at once and deletes the related cookies we can reach on this device. Your choice is saved per browser, so set it on each device you use. When we add a new kind of tool we ask again.
Push notifications are not cookies: they have their own on/off switch for each device in Account → Notifications.
Changes to this policy
We update this page when the cookies we use change. The date at the top shows the latest version.
Questions?
Contact us at info@bluepawsky.com