Legal

Cookie Policy

What we store in your browser, why, and how to control it. No advertising cookies.

Last updated 25 July 2026

This policy explains the cookies Bimiq uses and how to control them. The short version: we use a small number, the essential ones keep you signed in, and the only non-essential ones help us understand product usage. We do not use advertising cookies.

01What cookies are

A cookie is a small text file a website stores on your device. It lets the site remember things between requests, such as the fact that you are signed in. Some of what we describe here uses related technologies, such as browser local storage, which we group under the word cookies for simplicity.

We use cookies that we set ourselves (first-party). We do not run third-party advertising or cross-site tracking cookies.

02Essential cookies

These keep the service working and cannot be turned off from within the product, because without them you could not sign in or stay signed in. They are set by our authentication system.

Cookie	Purpose	Retention
`next-auth.session-token`	Keeps you signed in. This is the session itself.	Session, up to about 30 days
`next-auth.csrf-token`	Protects sign-in against cross-site request forgery.	Session
`next-auth.callback-url`	Remembers where to return you after signing in.	Session

Over HTTPS these carry a __Secure- prefix. Because they are strictly necessary, they are set without asking, which is permitted for essential cookies.

03Analytics cookies

We use PostHog to understand which features are used and where the product can be improved. It is served first-party through our own domain, so it does not act as a cross-site tracker.

Cookie	Purpose	Retention
`ph_*_posthog`	Recognises a returning browser and links product events into a session, so usage can be measured.	Up to about 12 months

This cookie does not read your project documents. It records how the product is used, not what is in your drawings.

04How to control cookies

You have a few ways to control non-essential cookies:

Your browser can block or delete cookies, and can be set to warn you before accepting them. Blocking essential cookies will stop you from signing in.
Most browsers offer a Do Not Track setting and controls for site data, which you can apply to Bimiq.
If you delete cookies, your signed-in session ends and analytics starts a fresh anonymous browser record.

Turning off the analytics cookie does not change what the product does or what it costs. It only means we see less about how it is used.

05Changes to this policy

As the product changes, the cookies it uses may change too. When that happens we will update this page and the date at the top. If we ever introduce a category of cookie that needs your consent, we will ask for it before setting those cookies.

06More information

This policy sits alongside our Privacy Policy, which explains how we handle personal data more broadly. Questions about cookies or privacy go to privacy@getbimiq.com.