1. Scope and default
This policy covers cookies, localStorage and similar access to information on a user’s device. The current Botkeep frontend does not set advertising, analytics or profiling cookies; does not fingerprint devices; and does not automatically load third-party embeds. Instrument Sans and IBM Plex Mono are served locally.
Only storage used to provide a feature requested by the user, protect sign-in or remember language and the privacy notice is active. These necessary tools do not require consent under the applicable cookie rules, but they remain disclosed here.
2. Current inventory
Session cookies contain random identifiers, not passwords, OAuth access tokens or workload secrets. They are HttpOnly, host-only and Secure in the production configuration. Workspace data and legal-version acceptance are stored on the API server. Older preview storage may remain in an existing browser but is no longer read by the API-connected panel; it can be removed using browser site-data controls.
| Name | Technology | Purpose | Duration | Consent |
|---|---|---|---|---|
| botkeep_cookie_preferences_v1 | First-party localStorage | Records notice version, necessary-only status and expiry so the notice is not repeated improperly | Up to 180 days | Not required; technical preference record |
| botkeep_maintenance_locale | First-party localStorage | Remembers a manual language choice, applies it on the main root or suggests it on the coming-soon root, and avoids repeating the country lookup; never overrides an explicit localised URL | Until changed or browser deletion | Not required; user-requested language preference |
| botkeep_panel_locale | First-party localStorage | Remembers the English/Italian panel choice made in Account, including login and registration; overrides country detection and prevents panel lookups. Independent from the public-site preference | Until changed or browser deletion | Not required; user-requested language preference |
| __Host-botkeep_user | First-party HttpOnly Secure cookie on the API host | Random customer-session identifier | Up to 24 hours by default, or logout/revocation | Not required; requested sign-in |
| __Host-botkeep_staff | First-party HttpOnly Secure cookie on the API host | Separate staff session after password and TOTP verification | 30 minutes, or logout/revocation | Not required; requested staff sign-in |
| __Host-botkeep_impersonation | First-party HttpOnly Secure cookie on the API host | Temporary staff support access to a customer panel, bound to the staff session | 10 minutes maximum; earlier on staff expiry, revocation or ending support access | Not required; requested staff support access |
| __Host-botkeep_oauth | First-party HttpOnly Secure cookie on the API host | Binds OAuth authorisation to the initiating browser | 10 minutes maximum | Not required; requested provider sign-in |
| __Host-botkeep_challenge | First-party HttpOnly Secure cookie on the API host | Binds the staff password step to authenticator verification | 5 minutes maximum | Not required; requested staff sign-in |
| __Host-botkeep_device | First-party signed HttpOnly Secure cookie on the API host | Recognises a browser during authenticated customer access for account security and duplicate-account review. A valid existing cookie may be compared during a new registration when staff enables the disclosed rule; not an authentication credential or hardware identifier | 30 days maximum per cookie; deleting it resets browser recognition | Security use only; not advertising or analytics |
3. Categories not currently used
- Preferences beyond the privacy notice, public-page language and panel language: not used.
- Browser audience-measurement or analytics cookies: not used. Separate server-side account-country statistics use no analytics cookie and are explained in the Privacy Policy.
- Advertising, cross-site tracking or profiling: not used.
- Automatically loaded social-media, video, map or scheduling embeds: not used.
4. Notice and choices
The first-visit notice explains that only necessary cookies and local preferences are active. “Continue with necessary only” records that fact; it is not consent to analytics or marketing. The settings panel remains available from every public footer and identifies inactive categories.
If Botkeep introduces a non-technical tool, it will remain blocked until a valid choice is made. Accept and reject controls will have equal prominence, optional purposes will be separate, no box will be preselected and withdrawal will be as easy as acceptance.
5. Delete or change browser data
Use “Cookie settings” to reopen the notice. Signing out revokes that API session and removes its cookie. Browser settings can remove site cookies and preferences, but do not delete server-side account or workload data. Use the privacy-rights contact for server-side data requests. Blocking necessary cookies prevents authenticated features from working; public legal information remains available.
Staff and customer session cookies are separate. Staff sign-out revokes only the staff session; it does not erase customer records. Staff shares the panel English/Italian preference and country-only language lookup.
6. External links and server logs
Only on the root homepage, when no manual public-page language preference exists, the browser requests a country code from GeoJS. In main-site mode, detection of Italy opens /it/ automatically through client-side navigation; other languages and coming-soon use suggestions. Lookup errors fall back to the browser language, then English. GeoJS receives the ordinary request IP and states that traffic passes through Cloudflare; Botkeep does not persist the returned country code. Explicit localised URLs do not request this lookup and are never overridden. A saved manual choice prevents later lookups, including when the visitor chooses original English from the Italian page. There is no country-based HTTP redirect.
Separately, the main-site panel, login and registration request the same country-code-only endpoint when botkeep_panel_locale is absent. Country IT selects Italian; every other country and any error or timeout selects English, regardless of browser language. The Account selector saves a manual preference and prevents subsequent panel lookups. The lookup omits cookies and referrer, does not include user content and is deduplicated during navigation. It does not run in the coming-soon build, where the panel is unavailable.
Other external services receive no request from the frontend until the user selects an external link. After leaving Botkeep, the destination provider applies its own storage and privacy rules. Ordinary web delivery may generate IP-based server logs, but that processing does not itself authorise storage on the user’s device.
7. Updates and contact
The inventory must be checked before every release that changes scripts, embeds, authentication or hosting. Questions may be sent to [email protected]; formal communications to [email protected].