Cookie policy.

Short version: Bioom uses no tracking cookies, no advertising cookies, and no third-party identifiers — on either the website or the Bioom application. The longer version is below.

1. 01What are cookies

   Cookies are small text files that websites place in your browser to remember things between visits — like your language preference or whether you're logged in. Some cookies are 'essential' (the site does not work without them); others are 'analytics' or 'advertising' (used to track you across sessions or sites).

2. 02What Bioom uses

   We use no advertising cookies, no cross-site tracking cookies, and no third-party identifiers — anywhere. On the Bioom website we use exactly one essential, first-party cookie: • NEXT_LOCALE — set by our internationalization layer (next-intl) to remember whether you chose English or Dutch. First-party, sameSite=lax, expires after 12 months, contains no personal data, never sent to third parties. In the Bioom application (for signed-in account holders) we use a small set of strictly necessary, first-party session and security cookies. They keep you logged in and protect your account; they set no third-party identifiers and do no tracking: • soil_access_token — httpOnly session token that keeps you signed in. • soil_refresh_token — httpOnly token (sameSite=strict, scoped to the sign-in path) used to renew your session securely. • soil_csrf — security token that protects against cross-site request forgery. • soil_authed — a small flag that tells the app you are signed in, so it shows the logged-in view. We also run Vercel Web Analytics for aggregate usage statistics. It is cookieless: it sets no cookies and stores no identifier in your browser. Visitors are distinguished only by a short-lived, anonymous hash that Vercel derives server-side and discards after 24 hours; the data is aggregate and is not tied to your IP address or to any individual.

3. 03Why we have a banner anyway

   Dutch law (the Telecommunicatiewet, implementing the ePrivacy Directive) requires us to inform visitors about any browser-storage usage — even essential, non-tracking storage. We satisfy this obligation with this policy page. There is no consent prompt or 'reject' option because every cookie we set — the website's NEXT_LOCALE and the Bioom application's session and security cookies — is strictly necessary and exempt from consent under the law.

4. 04How to remove or block cookies

   Even though we do not set tracking cookies, you can clear all bioom.app site data in your browser settings: • Chrome: Settings → Privacy and security → Site settings → bioom.app → Clear data • Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data → bioom.app • Safari: Settings → Privacy → Manage Website Data → bioom.app You can also block all storage from bioom.app via your browser's site-settings panel. The site will still load; you will lose your remembered language preference.

5. 05What changes if we add tracking later

   If we ever introduce tracking cookies (for example a LinkedIn or Meta pixel) we will: (a) update this policy; (b) replace the informational banner with a full consent-mode banner with category-level opt-in; (c) email everyone on the waitlist before the change goes live. Until then, this policy is the complete picture.