Cookie Policy
1. About This Policy
This Cookie Policy explains how Bipath, LLC ("Bipath", "we", "us") uses cookies and similar technologies on vectordataloader.app (our marketing site), in the Vector Data Loader application, and on docs.vectordataloader.app. It forms part of our Privacy Policy.
Cookies are small text files a website stores on your device. Similar technologies include browser local storage and session storage, and the pixels or tags that load third-party code to measure visits. In this Policy, "cookies" covers all of them.
2. Our Approach
- Opt-in for everyone. Wherever you are, we set no analytics or advertising cookie, and load no analytics or advertising tag, until you click "Accept" or turn that category on in "Cookie settings". "Reject" is as easy as "Accept".
- Marketing site only. Analytics and advertising tags run only on designated public marketing pages, never inside the signed-in application or documentation site. We do not send Customer Content, workspace data, credentials, or customer or user email lists to these tags. Marketing conversion pages may report events such as signup completion or purchase completion, including purchase value and currency, subject to your consent.
- Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a refusal of advertising cookies.
- Changing your mind. You can change or withdraw your choice at any time through "Cookie settings" in the footer of our website. We store your choice for 12 months, then ask again. We will also ask again if we add new categories.
3. Cookies We Use
3.1 Strictly necessary (always on)
These are needed to provide the Service you ask for, such as signing in and keeping it secure, and don't require consent. If you block them, the Service will not work.
| Name | Provider | Where | Purpose | Duration | Type |
|---|---|---|---|---|---|
sb-[project-ref]-auth-token (may be split into .0, .1) | Bipath (via Supabase Auth) | Application | Keeps you signed in and refreshes your session securely | Up to 400 days; renewed while you use the Service | First-party cookie |
impersonation_session_id | Bipath | Application (Bipath support staff only) | Identifies an authorized Bipath support session in a customer workspace | 24 hours | First-party cookie |
vdl_consent | Bipath | Marketing site | Remembers your cookie choices | 12 months | First-party cookie |
sb-[project-ref]-auth-token-code-verifier, sb-[project-ref]-auth-token-flow-[id]-code-verifier, sb-[project-ref]-auth-token-flows-code-verifier | Bipath (via Supabase Auth) | Sign-in and sign-up | Protects a sign-in with Google or GitHub, or a sign-in link, from being completed by someone else (PKCE) | Removed when the sign-in completes; otherwise the same lifetime as the session cookie, up to 400 days | First-party cookie |
vdl_conversion | Bipath | After a purchase or sign-up | Hands a one-time, random reference to the confirmation page; holds no personal or payment details | 10 minutes | First-party cookie |
vdl_terms_intent | Bipath | Sign-up page | Records that you ticked the Terms checkbox, so your acceptance can be saved when your account is created | 1 hour, or until your acceptance is saved | First-party cookie |
3.2 Preferences and similar storage
These remember choices you make and are not used for cross-site tracking. We use preference storage without consent only where an applicable exemption permits it for the feature you request; otherwise we obtain consent before storing or accessing it.
| Name | Provider | Where | Purpose | Duration | Type |
|---|---|---|---|---|---|
theme | Bipath | Application and marketing site | Remembers light or dark mode | Until cleared | Local storage |
first-sync-nudge-shown | Bipath | Application | Shows the first-sync tip only once | Until cleared | Local storage |
sidebar-collapsed | Bipath | Application | Remembers whether you collapsed the sidebar | Until cleared | Local storage |
current_project_id | Bipath | Application | Remembers the project you last selected | 30 days | First-party cookie |
low-credits-banner-dismissed | Bipath | Application | Remembers that you dismissed the low-credit banner | Until the browser tab is closed | Session storage |
theme (Docusaurus colour mode) | Bipath | Documentation site | Remembers light or dark mode on the docs | Until cleared | Local storage |
3.3 Analytics (only with your consent; marketing site only)
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_ga | Google Analytics (Google LLC) | Distinguishes visitors to measure site usage | 13 months | First-party cookie set by a third-party script |
_ga_[container ID] | Google Analytics | Keeps session state for measurement | 13 months | First-party cookie set by a third-party script |
Google Tag Manager, which we use to load these tags, does not itself set cookies.
3.4 Advertising (only with your consent; marketing site only)
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_fbp, _fbc | Meta Platforms (Facebook, Instagram) | Measures ads and builds advertising audiences | 90 days | First-party cookies set by a third-party script; Meta also sets cookies on its own domains |
_ttp, _tt_enable_cookie | TikTok | Measures ads and builds advertising audiences | 13 months | First-party cookies set by a third-party script; TikTok also sets cookies on its own domains |
_rdt_uuid | Measures ads and builds advertising audiences | 90 days | First-party cookie set by a third-party script; Reddit also sets cookies on its own domains |
[Names and durations to be confirmed by a browser check when the tags launch. This table must list every cookie actually set, and nothing that isn't.]
These providers may combine the information their cookies collect with other information they hold, and use it for their own purposes under their own privacy policies:
- Google: policies.google.com/privacy
- Meta: facebook.com/privacy/policy
- TikTok: tiktok.com/legal/privacy-policy
- Reddit: reddit.com/policies/privacy-policy
4. Third-Party Sites We Send You To
When you pay, you are sent to Stripe's hosted checkout and billing pages. When you choose to sign in with Google or GitHub, you are sent to their sign-in pages. Those sites set their own cookies under their own policies, which are not covered by this Policy.
5. Managing Cookies
- Our controls: use "Cookie settings" in our website footer to accept, reject or change analytics and advertising cookies at any time. Use "Do Not Sell or Share My Personal Information" in the footer to opt out of advertising "sharing" under US state laws.
- Global Privacy Control: supported, as described in Section 2.
- Your browser: most browsers let you block or delete cookies and site data. Blocking strictly necessary cookies will stop the Service working.
- Provider controls: you can also manage ad preferences directly with Meta, TikTok and Reddit, opt out of Google Analytics with Google's browser add-on (tools.google.com/dlpage/gaoptout), and use industry tools such as youronlinechoices.eu and optout.aboutads.info.
6. Changes to This Policy
We will update this Policy when our use of cookies changes and post a new Last updated date. Where required, we will obtain renewed consent before materially changing the purposes or partners covered by an existing consent, including where the broad category name stays the same.
7. Contact
Questions about cookies: privacy@vectordataloader.app. See also our Privacy Policy at vectordataloader.app/legal/privacy.