Legal/Last updated 8 June 2026/v1.2

Cookie Policy

Strictly-necessary cookies keep you logged in and secure and are always on. Analytics and marketing cookies run only if you opt in via the cookie banner — and you can change your choice anytime.

01What are cookies

Cookies are small text files stored on your device by your browser. They let websites remember information between page loads, such as whether you are logged in.

02Strictly necessary (always on)

These cookies are always active because the platform cannot function without them:

__cms_session — A signed JWT that authenticates your session. HttpOnly, Secure, SameSite=Lax. Expires when you log out or after 30 days of inactivity.
__cms_csrf — A random token that protects form submissions against cross-site request forgery attacks. Readable by JavaScript, SameSite=Lax.

Because these are strictly necessary for security, they cannot be disabled without breaking login functionality, and they do not require consent.

03Analytics & marketing (opt-in only)

With your consent, we and sites built on Binaav may use:

Analytics — privacy-friendly, first-party usage stats (page views, device type, traffic source) stored via your browser, and, where a site owner enables it, Google Analytics. Form answers are never collected.
Marketing — where a site owner enables them, Google Tag Manager and the Facebook Pixel, used to measure advertising.

None of these run until you choose “Accept” or switch on the matching category in the cookie banner. If you choose “Reject,” or your browser sends a Global Privacy Control or Do Not Track signal, they stay off.

04Your choices

You choose what to allow in the cookie banner on your first visit, and you can change or withdraw your choice anytime via the “Cookie settings” link. You can also clear or block cookies in your browser settings — note that blocking __cms_session will prevent you from staying logged in.

05Contact

Questions about our cookie usage: [email protected].