Legal

Cookie Policy

Draft for review. This document is a working draft and not yet legal advice. Have it reviewed by a qualified gestor or solicitor before relying on it for live transactions.
LAST UPDATED · MAY 2026

This Cookie Policy explains how Bim3Lab uses cookies and similar technologies, and how that fits with the EU ePrivacy rules and the GDPR. It should be read alongside our Privacy Policy.

1. What cookies are

Cookies are small text files stored on your device when you visit a website. They let a site remember your actions and preferences — such as keeping you signed in — across pages and visits. Similar technologies (local storage, tokens) work in comparable ways.

2. The cookies we use

We keep our use of cookies to a minimum. We group them as follows:

  • Strictly necessary cookies. Required for the website to function — for example, keeping you signed in to your account and protecting against fraud during checkout. These do not require your consent because the site cannot work without them. When account and payment features are live, these will be set by our authentication provider (Supabase) and our payment provider (Stripe).
  • Functional cookies. Remember preferences such as your chosen language. These are set only when needed to deliver a feature you have used.
  • Analytics cookies. We do not currently use analytics or tracking cookies. If we introduce analytics in future, we will use a privacy-friendly, cookieless tool where possible, and where consent is required we will ask for it before any non-essential cookie is set.
  • Advertising cookies. We do not use advertising or third-party tracking cookies.
  • Bot protection. Our sign-in, registration and password-reset pages use Cloudflare Turnstile to tell people from automated scripts. It is a security measure, not analytics: it does not profile you or follow you between sites.
  • Embedded video. Our documentation pages include walkthrough videos hosted on YouTube. Nothing is requested from YouTube until you press play. The still image you see beforehand is served from our own site, so simply reading the page contacts no one else. If you press play, YouTube receives your request and may set its own cookies — that is your choice, made at the moment you make it.

3. Consent

Strictly necessary cookies are set automatically because the service depends on them. For any non-essential cookies, we will request your consent through a clear banner before they are placed, and you will be able to accept or reject them. As we do not currently set non-essential cookies, no consent banner is shown. We would rather not show one at all than show one and still track you. That is why the embedded videos load only on request: it keeps the choice with you, and it keeps this page honest.

4. Managing cookies

You can control and delete cookies through your browser settings at any time. Blocking strictly necessary cookies may prevent parts of the site — such as signing in — from working correctly. Browser help pages explain how to manage cookies for Chrome, Firefox, Safari and Edge.

5. Third parties

Some necessary cookies are set by the providers that run parts of our service (for example, our authentication and payment providers). Their use of cookies is governed by their own policies, which we link to where relevant in our Privacy Policy.

6. Changes

We may update this policy as our use of cookies changes — for example, if we add analytics. Material changes will be reflected here with an updated date above.