Legal
Cookie policy
No advertising cookies, no tracking cookies. Here is everything that is stored, and where.
Version 1.0 · Last updated January 2026
The short version
BookPilot AI sets no advertising cookies and no tracking cookies. What it stores in your browser is what an application needs to work: your session, and your theme choice.
What BookPilot stores on your device
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
bookpilot.session |
localStorage | Keeps you signed in. Strictly necessary — without it you would have to sign in on every page. | Until you sign out |
bookpilot.theme |
localStorage | Remembers whether you chose light or dark. Only written if you use the toggle. | Until you clear site data |
Both are strictly necessary or set on your own action, which is why the app does not show a consent banner for them. Neither is readable by any other site, and neither is sent to us for analysis.
We do not currently load a third-party product analytics tool. If that changes, it will appear in this table, it will be gated behind the analytics toggle in Settings, and it will be off unless you switch it on.
The tracking script on your own website
This is the part that needs your attention as a site owner. The BookPilot tracking script
(bp.js) sets no cookies at all. It stores two values
in sessionStorage, which is emptied when the visitor closes the tab:
| Name | Purpose |
|---|---|
bp.utm | The campaign parameters from the ad link, so a purchase several pages later can be attributed to the ad that produced it. |
bp.sid | A random value that ties a visit's events together. It is not linked to a person and does not survive the tab. |
It records no IP address, no user agent, no device identifier, no referrer and no page content. Even so, storing information on a visitor's device is regulated in the EU under the ePrivacy rules regardless of whether it is technically a cookie, and whether an exemption applies depends on your setup and your national regulator's position.
So the script gives you a gate. Set window.bookpilotConsent = false
before it loads and it sends nothing; set it to true after your
consent tool records a choice, and call
bookpilot('page_view'). Whether you need that gate is your decision
as the controller of your site, and one worth taking advice on.
Managing storage
Your browser can clear or block site data for any site, including this one. Blocking it for BookPilot means you will be asked to sign in more often and your theme choice will not be remembered; nothing else in the product depends on it.
Related
What we do with the data itself is in the privacy policy.