Cookies & Tracking

This notice lists every cookie and similar technology used on go.bnbtools.com and in our emails. It's part of our Privacy Policy.

Meta Pixel (advertising measurement)

We advertise on Facebook and Instagram. When the Meta Pixel is switched on (you'll see an Ad choices link in the footer), it tells Meta (Meta Platforms Ireland Ltd / Meta Platforms, Inc.) which pages you view here, when you pick a toolkit or start checkout, and when you buy (order number, amount, currency and items). Meta uses this to measure our ads and show them to people likely to be interested. When you buy, our server also sends Meta that purchase with your email address, phone number and billing city/postcode/country hashed (scrambled so the raw values aren't sent), plus your IP address, browser and the Meta cookies below, so Meta can match it to an ad you saw. Meta may use the data under its own privacy policy.

• EU, EEA, UK and Switzerland (browsers set to a European time zone, and anyone whose billing address is there): nothing loads and nothing is sent to Meta unless you click Allow.
• Everywhere else it's on by default. Click Ad choices (do not sell or share) in the footer and then Don't allow to turn it off; we also honour the Global Privacy Control signal from your browser.
• You can change your mind any time with the same link. We don't use Google Analytics, TikTok, other advertising networks, social-media plug-ins or session recording. Our fonts and images come from our own server.

Cookies and storage we use

Name	Type	What it's for	How long
bnb-tools-session (session cookie)	Cookie, essential	Keeps you signed in to your library and keeps your checkout and forms working	2 hours of inactivity (sign-in lasts until you sign out)
XSRF-TOKEN	Cookie, essential	Security: protects forms against cross-site request forgery	2 hours
bnb_code	Cookie, functional	Remembers the $5 welcome code you asked for so it's applied at checkout	Until the code expires (max. 14 days)
bnb_offer	Cookie + browser local storage, functional	Remembers that you closed or used the welcome-code offer, so we don't show it again	7 days (the "used" state stays in local storage until you clear it)
bnb_buyer	Cookie, functional	Remembers that you've already bought, so we don't show you the new-customer offer	1 year
bnb_preview	Cookie, essential (staff only)	Lets our team preview the Site before launch	30 days; not set for customers
bnb_ads	Cookie, functional	Remembers your Ad choices answer (Allow / Don't allow, or "not asked" outside Europe)	1 year (180 days if not asked)
_fbp, _fbc (Meta Pixel), only if the pixel is on and allowed	Cookie, advertising	Set by Meta's pixel on our domain: a browser ID and, if you came from an ad, the ad click ID. Used to measure our ads	90 days
Cloudflare Turnstile (cf_clearance or similar), only if switched on	Cookie, essential	Bot protection on forms (by Cloudflare)	Up to 1 year

Apart from the Meta Pixel cookies, these are all "strictly necessary" or remember a choice you made on the Site, so under EU/UK rules they don't need consent, and none of them is used to follow you across other websites. The Meta Pixel cookies are only set in the EU/EEA/UK/CH after you click Allow. You can delete or block cookies in your browser settings; the Site will still show products, but sign-in and checkout need the essential cookies.

The payment page is run by Link (Stripe) on its own domain and uses its own cookies for payment security and fraud prevention; see Link's privacy policy.

Tracking in our emails

• Order and account emails (library link, sign-in links, review requests) contain no open-tracking. Their personal links (sign-in, library, downloads, review form) go straight to our Site.
• Marketing emails (only sent if you subscribed):
  • Click tracking. Links go through our own server (go.bnbtools.com/e/c/…) so we can count clicks and see which content is useful, then send you on to the page.
  • Open pixel. Unless you're in the EU, EEA, UK or Switzerland, marketing emails include a tiny invisible image (go.bnbtools.com/e/o/…) that tells us whether the email was opened. Turning off automatic image loading in your email app blocks it. Some email apps (for example Apple Mail) load images automatically, so an "open" isn't always a real read.
• We use this information only to measure and improve our own emails and to send less to people who don't read them. It's never shared with or sold to advertisers. Unsubscribing stops all marketing email.

Questions

Email info@bnbtools.com.