Be Right Back Tracking & Cookies
ePrivacy Directive & POPIA Aligned

Cookie & Local Storage Policy

Explains how we use browser storage, session tokens, and tenant routing identifiers without invasive behavioral tracking.

Effective Date: 1 January 2026 • Version 2026.4

1. What Are Cookies and Client Storage?

Cookies and client-side storage technologies (such as HTML5 `localStorage` and `sessionStorage`) are small data files preserved on your computing device when visiting modern web applications. They allow our platform to remember your active tenant workspace, authenticate your session securely, and preserve user preferences across page navigation.

Zero Invasive Advertising Trackers: Be Right Back does not use third-party advertising tracking cookies, cross-site profiling pixels (e.g. Meta Pixel, TikTok Pixel, or behavioral remarketing networks), or data brokers. All storage keys exist strictly to provide essential application functionality.

2. Detailed Technical Storage Inventory

Below is a complete, transparent disclosure of all cookies and local storage items utilized by Be Right Back:

Key / Identifier Category Purpose Lifespan
brb_active_tenant Strictly Necessary Resolves multi-tenant organization database partitioning to guarantee tenant data isolation. Persistent (Local)
brb_session_token Strictly Necessary Cryptographically signs authenticated user sessions via HMAC-SHA256 to prevent cross-site request forgery. Session / 8 Hours
brb_cookie_consent Strictly Necessary Stores your cookie consent preferences and timestamp to respect your privacy preferences. 12 Months
brb_installed_app_version Functional Enables automated hot-reloading checks to alert users when critical security patches are available. Persistent (Local)
brb_theme / settings Functional Remembers UI layout preferences (e.g. sidebar collapse state, display density). Persistent (Local)

3. Third-Party Technical Processors

Our platform integrates with two trusted technical service partners that may set transient security cookies strictly within their operational frames:

  • Paystack Payment Gateway (`js.paystack.co`): Used exclusively during checkout and billing updates. Paystack operates under PCI-DSS Level 1 compliance and uses antifraud session cookies within its secure modal frame.
  • Google Identity Services (`accounts.google.com`): Used only if your organization elects to sign in via Single Sign-On (Google SSO). Google manages authentication tokens in accordance with the Google API Services User Data Policy.

4. Managing and Withdrawing Your Consent

You may modify or withdraw your cookie preferences at any time. When you select "Necessary Only", all non-essential preference cookies will be deactivated.

Additionally, you can restrict or delete cookies via your browser settings:

  • Google Chrome: Settings → Privacy and security → Third-party cookies.
  • Apple Safari: Preferences → Privacy → Manage Website Data.
  • Mozilla Firefox: Settings → Privacy & Security → Enhanced Tracking Protection.
  • Microsoft Edge: Settings → Cookies and site permissions.