Cookies and analytics

The short version

BAINSA does not use advertising cookies, profiling cookies, or cross-site behavioural tracking. We use Vercel Web Analytics to understand aggregate public-site traffic without third-party cookies or persistent visitor identifiers.

The site also uses technology needed for security and authorised content-management sessions. We do not show an advertising-cookie banner because those choices do not exist; we will update this notice and introduce appropriate controls before enabling any marketing or profiling technology.

What these technologies are

Cookies are small values stored by a browser and returned to a website. Similar technologies can include local storage, security tokens, and request identifiers. Some are essential for a service to work; others measure or track behaviour. This page covers both cookies and comparable browser or server-side identifiers used on bainsa.ai.

Public website and contact form

Vercel Web Analytics records anonymous page views and client-side route changes for aggregate statistics. It can record the page or route, referrer, filtered query parameters, approximate location, device type, operating system, and browser. It does not use third-party cookies or link visitors across websites; its request-derived visitor hash is discarded after 24 hours. We do not send custom analytics events or form contents.

The contact form uses Cloudflare Turnstile to distinguish genuine visitors from automated abuse. The widget runs code supplied by Cloudflare and returns a short-lived verification token that our server validates before sending a message. Depending on Cloudflare’s configuration and risk checks, Cloudflare may use necessary storage or an existing clearance cookie.

BAINSA also applies server-side rate limits using an IP-based identifier. The related entry ordinarily expires after the ten-minute rate-limit window and is not used to build an advertising or analytics profile.

Read the Cloudflare privacy policy (opens in a new tab) and the Vercel Web Analytics privacy information (opens in a new tab) for details about their processing.

Authorised editor sessions

The private BAINSA administration area uses a first-party, HTTP-only authentication cookie named payload-token. It is necessary to keep an authorised editor signed in, is not available to page scripts, and expires after approximately two hours under the current configuration. It is relevant only to BAINSA editors who sign in to the administration area.

Your controls

You can delete or block cookies in your browser settings. Blocking strictly necessary storage can prevent the contact-form security check or editor sign-in from working. Vercel Web Analytics does not use a browser cookie or persistent cross-site identifier. BAINSA does not use advertising or profiling trackers on bainsa.ai.

External sites reached through a link may set their own cookies. Use the controls and privacy information provided by that site.

Changes and questions

We review this notice when the site’s services change. Marketing or profiling tools will not be activated before the required notice and consent controls are available. Questions can be sent to board@bainsa.ai.