In plain English. We set only the cookies needed to keep you signed in and to protect your session, plus one that remembers you have seen the cookie notice. Our analytics do not use cookies. Blogs published by our customers do not receive cookies from us at all.
1. About this policy
1.1 This policy explains how Referr Ltd, trading as Bloggable, uses cookies and similar technologies on getbloggable.com and bllog.io, and on blogs we host for our customers. It should be read with our Privacy Policy.
1.2 A cookie is a small text file that a website stores on your device. Local storage is a similar mechanism that stores data in your browser without sending it to the server on every request. The Privacy and Electronic Communications (EC Directive) Regulations 2003 require us to tell you about them and to obtain your consent for any that are not strictly necessary.
2. Cookies we set on our own sites
| Name | Purpose | Type | Duration |
|---|---|---|---|
| next-auth.session-token (or __Secure-next-auth.session-token) | Keeps you signed in. Contains a signed token identifying your login; it does not contain your password. | Strictly necessary | 30 days, refreshed while you use the app |
| next-auth.csrf-token (or __Host-next-auth.csrf-token) | Protects sign-in and sign-out requests against cross-site request forgery. | Strictly necessary | Session |
| next-auth.callback-url | Remembers the page to return you to after signing in. | Strictly necessary | Session |
| cookieConsent | Records that you have acknowledged our cookie notice so it is not shown again. | Preference | Persistent |
These cookies are set by us (first-party). We do not use them to track you across other websites.
3. Browser storage
We use local storage in the Bloggable app for interface state such as which blog you last had selected, unsaved editor changes, collapsed panels and dismissed tips. This data stays in your browser, is not used for tracking, and is cleared when you clear your browser's site data.
4. Analytics
We measure visits to our marketing site using Vercel Web Analytics, which does not use cookies or any persistent identifier. It derives a hash from your IP address and browser that changes every day and cannot be linked back to you, and we only ever see aggregated page-view counts. Inside the app we record which features are used against your Account, as described in the Privacy Policy, without third-party tracking scripts.
5. Third-party services you may be sent to
5.1 Stripe. When you subscribe or manage billing you are taken to pages hosted by Stripe, which sets its own cookies for fraud prevention and to operate its checkout. See Stripe's cookie policy.
5.2 Google. If you sign in with Google, or connect Google Search Console, Google's pages set Google's cookies. See Google's policy.
We do not load Stripe's or Google's scripts on pages that do not need them.
6. Blogs published by our customers
6.1 Bloggable sets no cookies and no local storage on the blogs it hosts for customers, whether at a path on getbloggable.com, a handle on bllog.io, or a custom domain. Reader counts use a first-party beacon with a daily-rotating hash rather than an identifier (see section 12 of the Privacy Policy).
6.2 Content that a customer embeds from third-party platforms, such as YouTube, Vimeo, Spotify, SoundCloud, CodePen or X, is loaded from that platform when the page is viewed and may set that platform's cookies. The blog owner, as the controller of their site, is responsible for any notice or consent that requires. A blog owner can avoid this by not embedding third-party content.
7. Managing cookies
7.1 Because we set no cookies that require consent, the notice shown on our site is informational; choosing "Decline" does not affect how the site works, and no non-essential cookies are set either way.
7.2 You can block or delete cookies in your browser settings. If you block the strictly necessary cookies you will not be able to sign in. Instructions for common browsers are at allaboutcookies.org.
8. Changes
8.1 If we introduce cookies that require consent we will update this policy, update the notice on our site to ask for consent before they are set, and give you a way to withdraw it.
9. Contact
Questions about cookies: hello@support.getbloggable.com