Legal

Cookie policy

This page explains which cookies and browser storage the Benefity website and app use, and why.

Last updated:

1. What cookies are

A cookie is a small text file a site saves in your browser and reads back on later requests. Browser storage (localStorage, sessionStorage) similarly keeps small entries that stay in your browser.

2. In short

  • We use no advertising, analytics or tracking cookies on our site (benefity.io) or in the app, and we don't load third-party cookies. The only third-party script is the robot check on the sign-in and sign-up forms (below).
  • All the cookies we use are first-party and strictly necessary: they keep you signed in, remember the language and store you chose, and complete store installs securely.
  • Because strictly necessary cookies don't require consent, we don't show a consent banner. If we ever add analytics or advertising cookies, we'll use them only with your consent and update this page.

3. Cookies we use

NameWhat it doesLifetime
bnf_langRemembers the language you chose. Set only when you use the language switch or sign in; valid on benefity.io and in the app.1 year
bnf_sessionKeeps you signed in to the app. Deleted when you sign out.30 days
bnf_storeRemembers which store you're working on in the app.1 year
bnf_goalRemembers your answer to "Where shall we start?" during setup.1 year
bnf_shopify_installConfirms during a Shopify install that the request really came from you.15 minutes
bnf_shopify_claimLinks the store you approved on Shopify to the account you sign up or log in with.30 minutes
bnf_supportOnly on our team's accounts: records whose app is open while giving support.2 hours

These cookies are never used to recognize you on other sites and are not shared. Session, store and Shopify cookies are set so that scripts in the browser can't read them (httpOnly).

4. Browser storage in the app

NameWhat it doesLifetime
bnf_ai_seenRemembers the AI jobs whose results you've seen, so the indicator doesn't announce them again.Until cleared from the browser (last 30 jobs)
bnf_small_okRemembers that you closed the small-screen notice.Until the tab is closed

5. Robot check on sign-in and sign-up forms

To prevent fake accounts and automated attacks, Cloudflare's Turnstile check loads on the sign-in, sign-up and forgot password forms (challenges.cloudflare.com). Your IP address and browser details go to Cloudflare for the check. According to Cloudflare, Turnstile uses no cookies and doesn't use this data for advertising. It's strictly necessary to keep the service secure; see the privacy policy for details.

6. Widgets on store websites

Benefity widgets running on our customers' sites don't use cookies. They only write these entries to the browser's local storage so the widget works properly:

NameWhat it doesLifetime
bf_hide_…Remembers how often the widget may show (e.g. "once a day", "once").Until the tab closes or until cleared, depending on the setting
bf_cd_…Remembers when a per-visitor countdown started.Until cleared from the browser
bf_cartOn IdeaSoft stores, keeps the cart total and item count for the free shipping widget so it stays current across tabs.Until cleared from the browser
bf_pingRemembers that the install check has run in this session.Until the tab is closed

In Google review widgets, reviewer profile photos load directly from Google's servers, and those requests are subject to Google's own policies. Store owners describe these entries in their own site's cookie policy; see the data processing agreement.

7. Managing cookies

You can view and delete cookies and browser storage in your browser settings. If you block strictly necessary cookies, you won't be able to sign in to the app or save your language choice.

8. Legal basis and your rights

Data processed through strictly necessary cookies relies on the legal bases in Article 5 of Turkey's KVKK of performing a contract and our legitimate interest in keeping the service secure. The data controller, your rights and how to contact us are described in the privacy policy.