Cookie Policy

Every cookie and storage technology we use, why, and how to control it.

Version 1.0Effective 2026-07-10Last reviewed 2026-07-10

1. What are cookies, and what controls them here

Cookies are small text files a website stores on your device to remember information between visits. We also use comparable browser storage (localStorage) for the same purposes. Under the EU ePrivacy Directive (2002/58/EC, as transposed into national law) and the equivalent Turkish framework, any cookie that is not strictly necessary for the site to function requires your prior, freely-given, specific consent before it is set — that is what our consent banner enforces (Google Consent Mode v2 default is "denied" until you choose).

2. Manage your cookie preferences

You can change your choice at any time — this immediately updates which cookies are allowed to run and re-sends the corresponding signal to Google Consent Mode v2.

3. Cookie categories

  • Strictly necessary — always on, no consent required. Required for the site to function: authentication (AWS Cognito session), security (CSRF/rate-limit tokens), load balancing, and remembering this consent choice itself. These cannot be switched off because the service cannot operate without them.
  • Analytics — requires your consent. Helps us understand how the product is used (pages visited, features used, errors hit) so we can improve it. Data is aggregated; we do not sell it.
  • Advertising — requires your consent. Used to measure the performance of our own ad campaigns (Google Ads) and, if enabled, to personalize ads you see elsewhere. Disabling this stops ad measurement and personalization cookies, not the ads you see (those are controlled by the sites you visit).
  • Functionality — requires your consent. Remembers preferences like language, theme, and recently used studios to make the product nicer to use across visits. Not required for core functionality.

4. Full cookie inventory

CategoryNameProviderPurposeDuration
Necessarybt_consent_idBeforeTomorrowRemembers your consent choice and links it to your proof-of-consent record.13 months
NecessaryCognito session cookiesAWS CognitoKeeps you signed in and protects your account.Session / 30 days
Necessarybt_signup_modal_seenBeforeTomorrowPrevents the signup prompt from reappearing repeatedly in the same browser session.Session
Analytics_ga, _ga_*Google AnalyticsDistinguishes users and sessions to measure product usage, in aggregate.Up to 13 months
Advertising_gcl_au, gclid-linked identifiersGoogle AdsMeasures the performance of our ad campaigns and, if enabled, personalizes ads.Up to 90 days
FunctionalityUI preference storageBeforeTomorrowRemembers non-essential preferences like recently used studios.Up to 12 months

5. Global Privacy Control (GPC)

If your browser or a browser extension sends the Global Privacy Control signal (navigator.globalPrivacyControl), we automatically treat it as a request to opt out of Analytics and Advertising cookies — the same as clicking "Reject all" — and show you a visible on-screen confirmation that the request was honored, as required by CCPA/CPRA regulations effective 2026 (11 CCR §7025). You can still open "Manage cookie preferences" above to grant specific categories if you wish to override the GPC default.

6. Third-party cookies

Analytics and Advertising cookies are set by Google (Google Analytics and Google Ads respectively) and are governed by Google's own privacy policy and cookie usage disclosures. We configure Google Consent Mode v2 so these providers never receive identifying signals until you grant the corresponding consent category.

7. Browser-level controls

In addition to our consent banner, you can block or delete cookies directly in your browser's settings. Note that blocking Necessary cookies through your browser (rather than through our own controls) may break sign-in and other core functionality, since those cookies are exempt from consent but not from your browser's own blocking controls.

8. Changes to this Cookie Policy

We will update this page whenever we add, remove, or change the purpose of any cookie. A change that expands what we track will trigger a fresh consent prompt rather than being silently applied to an existing "accept" choice.

9. Contact

Questions about cookies or tracking: contact@beforetomorrow.io. See also our Privacy Policy.