Cookie policy

1. What cookies and similar technologies are

Cookies are small files stored by a browser. Local storage is a browser storage mechanism that can remember preferences. Similar technologies may include pixels, tags, and SDKs. This policy uses "cookies" broadly to include these technologies where relevant.

2. How BayStore uses these technologies

BayStore uses cookies and similar technologies to operate the website, authenticate users, secure sessions, route checkout, remember privacy choices, prevent fraud, support customers, measure service usage, improve documentation, and diagnose errors. BayStore's website analytics is privacy-friendly and cookieless: it loads only after a visitor accepts analytics, is served from the BayStore origin, and sets no third-party tracking cookies. BayStore does not currently use advertising or marketing cookies.

3. Cookie categories

BayStore uses cookies in the following categories:

• Strictly necessary: required to operate the site, route requests, maintain security, remember consent, authenticate users, prevent fraud, process checkout, or provide customer access.
• Functional: remember preferences such as dismissed notices, selected products, berth comparisons, support settings, dashboard preferences, or interface choices.
• Analytics: measure page views, traffic sources, product-interest signals, documentation usage, error patterns, and aggregate service usage. BayStore uses privacy-preserving, cookieless analytics and requires consent where law requires it.
• Support and communications: enable support chat, ticket routing, demo scheduling, customer messaging, or status-notification features.
• Marketing: BayStore does not currently use marketing or advertising cookies. If introduced, they would support campaign measurement only where required notices, consent, or opt-out controls are available.

4. Cookie inventory

The technologies below reflect current use. BayStore keeps this inventory current and updates it before introducing any new category that requires consent.

Name or provider	Category	Purpose	When used	Retention
bs-analytics-consent	Strictly necessary	Remembers your privacy and analytics choice so BayStore can honor it.	After you save a privacy choice.	Stored in browser local storage until you clear site data.
BayStore session (first-party)	Strictly necessary	Maintains signed-in account access, administrator permissions, and customer dashboard sessions.	When an authorized user signs in.	Session or the account-security period.
BayStore security token (first-party)	Strictly necessary	Protects forms, account actions, checkout flows, and lifecycle operations from request forgery or abuse.	When forms, checkout, account, or operator actions are used.	Session.
Stripe / PayPal (payment provider)	Strictly necessary	Routes checkout, fraud prevention, payment authorization, receipts, refunds, and disputes; set and controlled by the provider.	During checkout, billing, subscription, refund, or payment-support activity.	Set by the payment provider (for example, Stripe identifier cookies may persist up to one year).
Plausible Analytics (cookieless)	Analytics	Measures aggregate traffic, page views, and documentation usage from the BayStore origin; sets no cookies and no cross-site identifier.	Only after you accept analytics.	No cookie stored; aggregate metrics retained up to 24 months.

BayStore does not currently use support-chat or marketing/advertising cookies. If introduced, they will be added to this inventory and gated behind consent where required.

5. Consent and preference controls

BayStore gives visitors a clear way to accept or decline non-essential analytics where required, with accept and decline offered as equally easy choices. Strictly necessary cookies may be used without consent when needed to provide the requested service, maintain security, process checkout, or remember privacy choices.

You can change a non-essential choice at any time. If you clear site data, the preference prompt may appear again.

6. Third-party cookies and providers

Authentication, payment checkout, fraud prevention, analytics, customer dashboard, status, and documentation may set first-party or third-party cookies depending on the provider and deployment. The inventory in Section 4 identifies the provider, purpose, category, and retention for each technology, and BayStore updates it when providers change.

7. Do Not Track and global privacy controls

Many browsers offer "Do Not Track" signals that do not have a uniform industry standard. BayStore honors the Global Privacy Control signal where applicable: because BayStore loads non-essential analytics only after you opt in, a Global Privacy Control signal means no non-essential cookies or analytics are set, and BayStore does not sell or share personal information.

8. Retention

Cookie and local-storage retention depends on the category and provider. Session cookies may expire when a browser session ends. Account-security, consent, checkout, and analytics cookies may last longer. The specific retention period for each entry is stated in the inventory in Section 4.

9. Relationship to the Privacy Policy

For more information about personal information handling, see the Privacy Policy. For customer-service processing, see the Data Processing Addendum.

10. Contact

Questions about this Cookie Policy should be sent to [email protected]. BayStore's mailing address is 1455 3rd Street, San Francisco, CA 94158, USA.