Sign inGet Credits

Cookie Policy

Last updated: September 20, 2026

How BookBlurb uses cookies and similar technologies.

1. What is a cookie

  • A cookie is a small text file stored on your device by a website. Strictly necessary cookies are required for the Service to function. All other cookies require your consent under EU / UK ePrivacy law.
  • We do not use cookies for advertising, cross-site tracking, or third-party data-sale at launch.

2. What we use

  • Session JWT — strictly necessary authentication cookie, first party, cleared when you sign out.
  • CSRF token — strictly necessary security cookie, session lifetime.
  • Cookie-consent state — strictly necessary record of your choice, 12 months.
  • Cloudflare __cf_bm and cf_clearance — strictly necessary bot detection and abuse prevention, typically 30 minutes.
  • No other cookies load on the site at launch. We do not set analytics, advertising, marketing, or session-replay cookies.

3. What we do NOT use at launch

  • No Google Analytics, Plausible, Fathom, or other web analytics tool requiring consent; no advertising pixels; no Microsoft Clarity, Hotjar, FullStory, or LogRocket session-replay tools; no cross-site tracking, retargeting, affiliate, or ad-network cookies.
  • If we add optional analytics later, we will update this policy first, block non-essential scripts until opt-in, and honour existing opt-out choices.

4. Consent and control

  • In EU / UK / EEA / Switzerland / Brazil and UK-GDPR jurisdictions, the banner shows Accept optional and Reject optional with equal prominence and no pre-ticked boxes. Only strictly necessary cookies load until you choose.
  • You can change your choice at any time via Cookie preferences in the site footer. The Service is not intended for users under 16.

5. Do Not Track / Global Privacy Control

  • We honour Global Privacy Control (GPC) signals where required by law. A GPC signal is treated as an opt-out of sale or sharing of personal information; we do not sell or share at launch.

6. Third-party cookies

  • At launch, Cloudflare cookies are the only third-party cookies set on our domain and are strictly necessary for security. Creem may set cookies on checkout.creem.io, governed by Creem's privacy policy.

7. Changes and contact

  • Material changes will be posted on this page with a new Last updated date and, where required, a re-consent prompt.
  • Privacy / cookie requests: privacy@bookblurb.org. General support: support@bookblurb.org.