Bsight AnalyticsCookie Policy
Last updated: 4 March 2026
1. Introduction
This Cookie Policy explains how BSight ("we", "us", "our") uses cookies on our website and platform (the "Service"). It describes what cookies are, what cookies we use and your choices regarding cookies.
This policy should be read alongside our Privacy Policy, which provides further detail on how we handle your personal data.
2. What Are Cookies
Cookies are small text files placed on your device (computer, tablet, or mobile phone) by websites you visit. They are widely used to make websites work efficiently, to enable functionality and to provide information to website operators.
Cookies can be "session" cookies (which are deleted when you close your browser) or "persistent" cookies (which remain on your device for a set period or until you delete them).
3. Our Approach to Cookies
BSight uses only essential cookies that are strictly necessary for the Service to function. We do not use any analytics, advertising, tracking, or third party marketing cookies.
Because we only use strictly necessary cookies, these cookies do not require your consent under UK data protection law. However, we believe in transparency and want you to understand exactly what cookies we use and why.
4. Cookies We Use
The following table lists all cookies used by the BSight Service:
| Cookie Name | Purpose | Type | Duration |
|---|---|---|---|
| bsight_session | Maintains your authenticated session after you sign in. This cookie is essential for the Service to recognise you as a logged in user and to keep you signed in across page loads. | Essential | 30 days |
| bsight_google_state | Used during the Google OAuth sign in flow to protect against cross site request forgery (CSRF) attacks. This cookie stores a randomly generated state parameter that is validated when Google redirects you back to our Service. | Essential | Short lived (expires after the authentication flow completes, typically within minutes) |
| bsight_google_verifier | Used during the Google OAuth sign in flow as part of the Proof Key for Code Exchange (PKCE) security mechanism. This cookie stores a code verifier that ensures the authentication code exchange is secure and has not been intercepted. | Essential | Short lived (expires after the authentication flow completes, typically within minutes) |
5. Detailed Cookie Descriptions
5.1 bsight_session
This is the primary authentication cookie. When you sign in to BSight using your Google account, a session is created and this cookie is set to maintain that session. Without it, you would need to sign in again on every page load. This cookie is classified as strictly necessary because the Service cannot function without authenticated sessions.
- Set by: BSight (first party)
- Expiry: 30 days from issuance (refreshed on activity)
- HttpOnly: Yes (not accessible to JavaScript)
- Secure: Yes (only sent over HTTPS)
5.2 bsight_google_state
This cookie is set immediately before you are redirected to Google for authentication. It contains a randomly generated value that is checked when Google redirects you back to BSight. This prevents CSRF attacks where a malicious site might attempt to forge an authentication request on your behalf.
- Set by: BSight (first party)
- Expiry: Short lived (consumed and deleted after the OAuth callback)
5.3 bsight_google_verifier
This cookie works in conjunction with the PKCE (Proof Key for Code Exchange) extension to OAuth 2.0. It stores a cryptographic code verifier that is used to prove that the entity exchanging the authorisation code is the same one that initiated the sign in flow. This provides an additional layer of security against authorisation code interception attacks.
- Set by: BSight (first party)
- Expiry: Short lived (consumed and deleted after the OAuth callback)
6. Cookies We Do Not Use
For the avoidance of doubt, BSight does not use:
- Analytics cookies (e.g. Google Analytics)
- Advertising or remarketing cookies
- Social media tracking cookies
- Third party tracking pixels or beacons
- Any non essential cookies
7. Managing Cookies
You can control and manage cookies through your browser settings. Most browsers allow you to view, delete and block cookies. However, please note that if you block or delete the essential cookies used by BSight, the Service will not function correctly and you will be unable to remain signed in.
Instructions for managing cookies in common browsers:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Preferences > Privacy > Manage Website Data
- Edge: Settings > Cookies and site permissions > Cookies and site data
8. Changes to This Policy
We may update this Cookie Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to check this page periodically for any updates.
9. Contact Us
If you have any questions about this Cookie Policy or our use of cookies, please contact us:
Email: support@bsight.uk
For information about how we handle your personal data more broadly, please see our Privacy Policy.