Cookie Policy

Last updated: 2026-05-16 — Version 1

We use cookies (and similar technologies) sparingly. Here’s what:

We currently set

bona_session — the authentication session cookie. Set when you sign in by clicking a magic link sent to your email, cleared when you log out. HttpOnly, SameSite=Lax. Required for the site to remember you between page loads.

Not yet set — will be documented when introduced

bona_sid_anon — an anonymous analytics session ID. This cookie is not yet in use. It will ship with PostHog analytics instrumentation and will be described here in full at that time.

On kit pages (sponsor-facing)

No cookies.
No third-party trackers.
The kit page is intentionally tracker-free so sponsors viewing it don’t get profiled.

How to opt out

Analytics: when we ship analytics, you’ll be able to toggle “analytics tracking” off in your account settings.
Do Not Track: we will honor Do Not Track when analytics ships.
Browser cookie blocking: the site will work, but you’ll have to log in more often.

We don’t use Google Analytics, Facebook Pixel, or any advertising trackers. Ever.