Cookie Policy
How Book01 uses cookies and tracking technologies
Cookie Policy
Effective Date: October 19, 2025
Last Updated: October 19, 2025
1. Introduction
This Cookie Policy explains how Book01 ("we," "us," or "our") uses cookies and similar tracking technologies on our website and application. This policy should be read in conjunction with our Privacy Policy.
What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember your preferences, authenticate you, and provide analytics about website usage.
2. Types of Cookies We Use
2.1 Essential Cookies (Strictly Necessary)
These cookies are essential for the operation of our Service and cannot be disabled. They enable core functionality such as security, authentication, and session management.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
sb-access-token | User authentication | Session | HTTP-only |
sb-refresh-token | Session renewal | 30 days | HTTP-only |
locale | Language preference (English/Norwegian) | 1 year | Standard |
csrf-token | Cross-site request forgery protection | Session | HTTP-only |
cookieConsent | Main cookie consent flag | 6 months | Standard |
cookieConsentAnalytics | Analytics cookie preference | 6 months | Standard |
cookieConsentTimestamp | Timestamp of consent decision | 6 months | Standard |
Legal Basis: These cookies are necessary for contract performance (GDPR Art. 6(1)(b)) and do not require consent under the EU ePrivacy Directive. Cookie consent preference cookies are necessary to remember your privacy choices.
2.2 Analytics Cookies (Performance)
We use privacy-focused analytics to understand how visitors use our Service and improve user experience. These cookies require your consent.
| Service | Cookie Name | Purpose | Duration | Privacy Features |
|---|---|---|---|---|
| Vercel Analytics | None (cookieless) | Page views, visitor metrics | N/A | Privacy-focused, no personal data tracking |
Legal Basis: Consent (GDPR Art. 6(1)(a)). Analytics are only loaded when you accept analytics cookies.
Note: Vercel Analytics operates without cookies and does not track individual users or create profiles. It provides aggregate, anonymized data about page views and basic usage patterns. You can decline analytics cookies and still use all Service features.
2.3 Cookies We DO NOT Use
- Marketing cookies - We do not use cookies for advertising or marketing purposes
- Social media tracking cookies - We do not integrate social media tracking pixels
- Third-party advertising cookies - We do not allow third-party advertisers to set cookies
- Cross-site tracking cookies - We do not track you across other websites
3. Third-Party Cookies
Our Service uses minimal third-party services:
3.1 Supabase (Authentication)
- Purpose: User authentication and session management
- Cookies:
sb-access-token,sb-refresh-token - Provider: Supabase (Frankfurt, Germany)
- Privacy policy: https://supabase.com/privacy
3.2 Stripe (Payment Processing)
- Purpose: Secure payment processing
- Cookies: Set by Stripe during checkout (if applicable)
- Provider: Stripe
- Privacy policy: https://stripe.com/privacy
4. How We Use Cookies
4.1 Authentication and Security
- Maintain your logged-in session
- Protect against unauthorized access
- Prevent cross-site request forgery (CSRF) attacks
4.2 Preferences
- Remember your language preference (English or Norwegian)
- Maintain your theme preference (light or dark mode)
4.3 Analytics
- Understand how visitors use our Service
- Identify popular features and areas for improvement
- Monitor Service performance and errors
5. Your Cookie Choices
5.1 Essential Cookies
Essential cookies are required for the Service to function and cannot be disabled. Blocking these cookies will prevent you from using the Service.
5.2 Analytics Cookies
You can control analytics cookies through our cookie consent banner. On your first visit, you can choose to accept or decline analytics cookies. You can change your preference at any time by visiting this Cookie Policy page and using the consent manager at the bottom of the page.
5.3 Managing Cookies in Your Browser
You can control and delete cookies through your browser settings:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Privacy, search, and services → Cookies
Note: Disabling essential cookies will prevent you from logging in and using the Service.
6. Cookie Consent and Management
6.1 Essential Cookies
Essential cookies are automatically set and do not require consent under EU law (ePrivacy Directive and GDPR), as they are strictly necessary for providing the Service you requested.
6.2 Analytics Cookies
We request your consent before enabling analytics cookies. On your first visit, a banner will appear asking you to accept or decline analytics cookies. Your choice is stored for 6 months, after which we will ask for your consent again.
6.3 Managing Your Cookie Preferences
You can manage your cookie preferences at any time:
- First Visit: A banner will appear at the bottom of the page with options to accept or decline analytics cookies
- Change Preferences: Visit this Cookie Policy page and use the consent manager tool below to view or withdraw your consent
- Automatic Renewal: Your consent preference expires after 6 months, and you will be asked to renew your preference
- Essential Cookies: Essential cookies (authentication, language, CSRF protection) are always active as they are necessary for the Service to function
When you withdraw consent, all consent preference cookies are cleared, and the banner will reappear on your next visit.
7. Compliance with Norwegian Law
This Cookie Policy complies with:
- Norwegian Electronic Communications Act (Ekomloven) § 2-7b - Cookie consent requirements
- Norwegian Personal Data Act (Personopplysningsloven) - Implementation of GDPR in Norway
- EU ePrivacy Directive (2002/58/EC as amended by 2009/136/EC) - Cookie rules
The Norwegian Data Protection Authority (Datatilsynet) recognizes that essential cookies and privacy-focused, anonymized analytics do not require consent.
8. Updates to This Cookie Policy
We may update this Cookie Policy to reflect changes in our use of cookies or legal requirements. We will:
- Update the "Last Updated" date at the top of this policy
- Notify users of significant changes via email or prominent notice
- Maintain previous versions for reference
9. Contact Us
If you have questions about our use of cookies, please contact us:
Email: paal.book01@gmail.com
Address: Nordåssløyfa 46B, 1251 Oslo, Norway
10. Additional Resources
- Privacy Policy - How we collect and process personal data
- Terms of Use - Terms governing your use of the Service
- Datatilsynet (Norwegian Data Protection Authority) - Cookie guidance
- EDPB Cookie Guidelines - EU cookie consent guidance
Language Notice: This Cookie Policy is available in English and Norwegian. For international users, the English version is the primary reference. For Norwegian users, the Norwegian version takes precedence in case of conflicts. We maintain both versions with equal care.
Loading...