Legal
Cookie & Storage Policy
Last updated: 2 August 2026
The short version: BOSmode sets no advertising cookies, runs no analytics, and embeds no third-party tags. Everything we store in your browser is strictly necessary to make a feature you asked for work. The full inventory is below, and it is exhaustive rather than illustrative — it was compiled by reading the source, not from a template.
1. Scope of this policy
This policy covers inbosmode.com and the signed-in BOSmode application. “Cookies and storage” here means any technology that reads from or writes to your device: HTTP cookies, localStorage, sessionStorage and equivalents. All of them are treated the same way under the ePrivacy rules, so we list them together.
It sits alongside the Privacy Policy, which governs personal data generally, including anything derived from the items listed here.
2. What we do not do
We do not use Google Analytics, Google Tag Manager, the Meta pixel, PostHog, Mixpanel, Segment, Hotjar, Microsoft Clarity, or any other analytics or advertising tag. No third party sets a cookie through our site. We do not build advertising profiles, we do not sell or share browsing behaviour, and we run no cross-site tracking of any kind.
Our fonts are self-hosted, compiled into the site at build time, so your browser makes no request to Google Fonts when you visit.
This is a statement about what is in the code today, not a promise that it can never change. If a tag is ever added, it must be gated by the mechanism in section 5 and listed here in the same change, and the date at the top of this page will move.
3. Strictly necessary storage we do use
Under the ePrivacy rules, storage that is strictly necessary to deliver a service you explicitly requested does not require consent. Everything in this table falls into that category, every item is set by us rather than a third party, and none of it is used to profile you.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sb-<project>-auth-token (and related sb-* cookies) | Cookie · first party | Keeps you signed in and maintains your session. Set by Supabase Auth only after you sign in. | Session / until sign-out or token expiry |
| bosmode-theme | localStorage | Remembers whether you chose the light or dark interface so it is applied before the page paints. | Until you clear site data |
| bosmode-theme-migration-v2 | localStorage | One-time flag marking that a stale theme value from an earlier version was reset. | Until you clear site data |
| bosmode-alice-voice-mode | localStorage | Remembers whether you chose the standard or premium ALICE voice, so your choice survives a reload. | Until you clear site data |
| bosmode-alice-persona-mode | localStorage | Remembers which ALICE conversation mode you were using. | Until you clear site data |
| bos_booted | sessionStorage | Marks that the boot animation has already played, so it does not replay on every navigation. | Until the browser tab is closed |
| bosmode-consent-v1 | localStorage | Records the choice you made on the consent notice, and when, so we can honour it and not ask again. | Until you clear it or clear site data |
4. Optional storage: there is none
There is no analytics, advertising, personalisation or social-media storage in use today. This section exists so that the absence is stated plainly rather than left to be inferred: the table in section 3 is the whole list.
5. How the consent gate works
The consent notice you may have seen still records your answer, because it is wired to a real gate in our code rather than being decorative. Three properties of that gate matter:
- The default is refusal. Until you make a choice, nothing beyond strictly necessary storage is permitted — we do not treat silence, scrolling or continued browsing as consent.
- Nothing optional can load without a matching stored permission. Any future analytics or marketing tag must be wrapped in the gate; an ungated tag is a bug, not a policy exception.
- Your answer is versioned and dated, so we can tell what you agreed to and when, and ask again if the categories materially change.
Because there is nothing optional in use, accepting and rejecting currently produce the same result. We still ask, so that the gate is exercised and your recorded preference is already in place before anything could be added.
6. Change or withdraw your choice
Withdrawing is as easy as giving consent — both are one button press from here, with no account required.
Checking your saved preference…
7. Browser controls and privacy signals
You can block or delete everything listed above through your browser’s own settings, and you can browse in a private window to discard it all at the end of the session. Blocking the strictly necessary items will sign you out and reset your interface preferences, but the site will still work and remains fully readable.
We do not currently detect the Do Not Track or Global Privacy Control headers programmatically. That is deliberate rather than an omission: those signals exist to switch off tracking and sale of personal information, and we do neither, so there is nothing on this site for them to change. If we ever add an optional tag, honouring those signals will be part of shipping it.
8. Talking to ALICE is separate
Consent to browser storage is not the same as consent to be recorded or called, and neither answer on the cookie notice affects the other. What happens when you speak or type to our AI agent — the transcript we keep, the microphone audio streamed to our AI provider, the IP address logged with your submission, and the outbound phone call you can request — is described in the Privacy Policy. Rejecting optional storage does not delete a transcript; to do that, make a deletion request as described there.
9. Changes to this policy
If we add, remove or repurpose anything that reads from or writes to your device, we will update the table in section 3 and the date at the top of this page in the same change. Where the addition is not strictly necessary, we will ask for your consent before it can run.
10. Contact
Questions about anything on this page, or a request to see what we hold: support@inbosmode.com. This is our only monitored address.