Cookie Policy
Last updated:
This Cookie Policy explains how BuilderPal uses cookies and similar technologies (local storage, IndexedDB, session storage, service workers, pixel tags) on builderpal.io and within the BuilderPal web app. It supplements our Privacy Policy.
What is a cookie?
A cookie is a small text file a website asks your browser to store. It is sent back to the same website on later visits, which lets the site remember things like that you are logged in. "Similar technologies" include local storage and IndexedDB (used by progressive web apps to cache data offline) and service workers (used to keep the app fast and usable on flaky connections).
Categories we use
- Strictly necessary. Required for the Service to function — session and authentication cookies (better-auth), CSRF tokens, load-balancing affinity, and security cookies that detect tampering. Without these, you cannot sign in or stay signed in.
- Functional. Remember your preferences — interface theme, sidebar collapse state, last-viewed workspace, time zone guess.
- Performance & diagnostics. Help us understand how the app is performing and find bugs. Today this is limited to Sentry error monitoring; if we later add product analytics or first-party usage metrics, this policy will be updated and we will ask for consent where the law requires.
The cookies you'll see
| Name (prefix) | Purpose | Category | Lifetime |
|---|---|---|---|
| better-auth.session_token | Keeps you signed in. | Strictly necessary | ~30 days |
| better-auth.csrf_token | Cross-site request forgery protection. | Strictly necessary | Session |
| bp.workspace | Remembers which workspace you last opened. | Functional | ~1 year |
| bp.ui.* | UI preferences (theme, sidebar state, density). | Functional | ~1 year |
| sentry-* | Error and performance monitoring (Sentry). | Performance & diagnostics | Session – ~90 days |
Cookie names may vary slightly as we update libraries. We will refresh this table when names change.
Service workers and offline data
BuilderPal registers a service worker so the app keeps working when your connection drops in the field. The service worker caches static assets (HTML, CSS, JS, fonts, icons) and, for some features, recently viewed jobs and customers in IndexedDB so you can reference them offline. This data is held on your device and is removed when you sign out or uninstall the app.
How to control cookies
- Browser settings. Every major browser lets you delete cookies, block third-party cookies, or block cookies entirely. Search your browser's help for "cookies".
- Sign-out. Signing out clears the session cookies listed above.
- Do Not Track / Global Privacy Control. We honour the Global Privacy Control (GPC) signal where the law requires.
- Blocking strictly-necessary cookies will break sign-in and most of the app.
Changes to this Cookie Policy
We will update this page whenever we add, remove, or materially change a cookie or similar technology. The "Last updated" date at the top of the page reflects the most recent revision.