Legal
Cookie Policy
Effective Date: April 9, 2026 · Last Updated: October 12, 2026
This Cookie Policy (“Policy”) explains how Eikon Solutions LLC, doing business as BuildWorkPro (“BuildWorkPro,” “we,” “us,” or “our”) uses cookies and similar client-side storage technologies on the BuildWorkPro platform and marketing website (collectively, the “Platform”). This Policy should be read in conjunction with our Privacy Policy.
1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) by a website when you visit it. Cookies enable the website to recognize your device, maintain session state, and store your preferences. They are widely used to make websites function correctly, function more efficiently, and provide information to site operators.
In addition to traditional cookies, this Policy also covers the use of browser local storage (localStorage) and session storage (sessionStorage), which serve similar purposes but have different technical characteristics.
2. Cookies We Use
BuildWorkPro employs a minimal, privacy-respecting approach to cookies. We categorize our cookies as follows:
2.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled without rendering core features inoperable. Under applicable privacy laws, including the EU ePrivacy Directive (2002/58/EC as amended) and the UK Privacy and Electronic Communications Regulations (PECR), no consent is required for strictly necessary cookies.
| Cookie / Storage | Purpose | Duration |
|---|---|---|
connect.sid |
Session authentication — maintains your logged-in state as you navigate the Platform. Contains a cryptographically signed session identifier; does not contain your password or personal data in plaintext. | Expires after 24 hours of inactivity or 30 days maximum. |
| CSRF token | Cross-site request forgery protection — ensures that form submissions and API requests originate from the BuildWorkPro application and not from a malicious third-party site. | Per session. |
| Tenant context | Identifies the organization you are currently operating within in our multi-tenant environment, ensuring that data requests are scoped to your organization. | Per session. |
2.2 Functional / Preference Cookies
These cookies and local storage entries remember your settings and interface choices to provide a more consistent user experience. They are set under the lawful basis of legitimate interest and do not track you across other websites.
| Cookie / Storage | Purpose | Duration |
|---|---|---|
| Theme preference | Stores your light or dark mode selection. | Persistent (localStorage). |
| Language / locale | Stores your preferred language and date/number format settings. | Persistent (localStorage). |
| UI state | Remembers interface preferences such as sidebar collapsed/expanded state, table column visibility, and sort order. | Persistent (localStorage). |
bwp.tools.payapp.v1 |
Keeps the pay application you build in the free online tool on the marketing site (project details, schedule of values, amounts) so it is still there when you come back. Stored only in your browser; never sent to us. | Persistent (localStorage) until you press “Start blank” or clear site data. |
bwp.tools.estimate.v1 |
Keeps the estimate you build with the free calculators on the marketing site (the lines you add, with quantities and any prices you entered) so it is still there when you come back. Stored only in your browser; never sent to us. | Persistent (localStorage) until you press “Clear” or clear site data. |
bwp.tools.prices.v1 |
Remembers the unit prices and rates you type into the free calculators (for example board per sheet, labor per square foot, or the wage in the labor burden calculator) so you do not have to enter them again. Stored only in your browser; never sent to us. | Persistent (localStorage) until you clear the fields or clear site data. |
bwp-cookies-accepted / bwp-cookies-declined |
Records the choice you made in the cookie consent banner on the marketing site, so we do not ask again and can honor your decision on every page. | Persistent (localStorage). |
2.3 Analytics & Advertising Cookies (Consent-Based, Marketing Site Only)
The BuildWorkPro marketing website uses Google Analytics 4 to understand how visitors find and use our pages, PostHog to see which pages lead visitors to sign up (page views and clicks only — the marketing website is never recorded), and the Meta (Facebook) Pixel to measure the performance of our advertising and to show relevant ads to people who have visited the site. The default behavior depends on where you are visiting from:
-
If you are in the European Economic Area, the United Kingdom, or Switzerland, these technologies are strictly opt-in. Google Analytics 4 runs under Google Consent
Mode v2 with every signal denied by default — in that state it sets
no cookies and sends only anonymized, aggregated measurement pings (no advertising
identifiers) — and begins using cookies such as
_gaonly after you click “Accept.” The Meta (Facebook) Pixel has no cookieless mode, so its script is not loaded at all until you click “Accept.” PostHog is likewise not loaded until you click “Accept.” - If you are visiting from anywhere else (including the United States), analytics and advertising measurement are on by default: Google Analytics runs with full consent signals, and PostHog and the Meta Pixel load and may set the cookies listed below, unless and until you opt out. Clicking “Decline” on the banner (or using the “Cookie settings” link in the footer at any time) is a full opt-out of this measurement, including any “sale” or “sharing” of personal information for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) and similar U.S. state laws. We honor your choice on this device from that point on.
We determine your region from your IP address at the network edge; if it cannot be determined, we apply the stricter opt-in behavior. You can change your choice at any time via the “Cookie settings” link in the footer.
| Cookie | Purpose | Duration |
|---|---|---|
_ga |
Set by Google Analytics (once analytics/advertising consent applies per Section 2.3) to distinguish unique visitors. | Up to 2 years. |
_ga_* |
Set by Google Analytics (once analytics/advertising consent applies per Section 2.3) to maintain session state for our measurement property. | Up to 2 years. |
_fbp |
Set by the Meta Pixel (once analytics/advertising consent applies per Section 2.3) to identify browsers for ad measurement and delivery. | Up to 3 months. |
fr / _fbc |
Set or read by Meta (once analytics/advertising consent applies per Section 2.3) for advertising attribution and retargeting when you arrive from or interact with a Meta ad. | Up to 3 months. |
ph_<project key>_posthog |
Set by PostHog (once analytics/advertising consent applies per Section 2.3) to hold a random visitor identifier. It is scoped to buildworkpro.com, so the web application reads the same identifier (Section 2.4). | 1 year. |
Apart from the PostHog cookie (Section 2.4), none of these cookies are used inside the BuildWorkPro application itself. For details on how these third parties process data, see Google’s Privacy Policy and Meta’s Privacy Policy.
Separately, account-signup conversions are measured server-side via Meta’s Conversions API, which is not a cookie and sets nothing in your browser; see our Privacy Policy for how that hashed data is processed.
2.4 Product Analytics Cookie (Web Application)
Inside the BuildWorkPro web application, we use PostHog to understand how the Platform is used — which pages are visited, which features are used, and where new users get stuck during setup — so we can improve it. PostHog is served through our own domain and stores a random identifier in the first-party cookie below and in your browser’s local storage. All text displayed on screen and everything you type is masked before any data leaves your browser, and no names or email addresses are collected. During a free trial, PostHog also records masked session replays as described in our Privacy Policy; paying subscribers are not recorded. On the marketing website the same cookie is set only under the consent rules in Section 2.3, and nothing there is recorded. Because the cookie is scoped to buildworkpro.com, a visit to the marketing website and your later use of the application share one random identifier, which shows us which pages lead people to sign up.
Before you sign in, the application uses this cookie only on its sign-up, sign-in, email-verification and password-help pages, and only if the marketing website has already set it under Section 2.3; there it records page views and clicks, with the same masking, and no session replays. The application never creates the cookie before you sign in, and declining in the marketing website’s cookie banner deletes it, so those pages are then not tracked either.
| Cookie | Purpose | Duration |
|---|---|---|
ph_<project key>_posthog |
Set by the BuildWorkPro web application to hold a random identifier that links product-usage events (and, during a free trial, masked session replays) to your account without your name or email address. | 1 year. |
2.5 Cookies We Do Not Use
We do not deploy any of the following:
- Undisclosed advertising cookies: The Meta Pixel described in Section 2.3 is the only advertising/retargeting technology we use, and it runs only under the regional consent posture described there (opt-in in the EEA/UK/Switzerland; on by default with a full opt-out everywhere else). We do not use other ad networks’ tags (e.g., Google Ads remarketing, LinkedIn Insight Tag).
- Other session recording or heat-mapping tools: Apart from the masked, trial-only session replay and click analytics in the web application described in Section 2.4, we do not record sessions. We do not use Hotjar, FullStory, or any similar service, and the marketing website is never recorded.
- Social media widget cookies: We do not embed social media widgets, share buttons, or login plugins that set third-party tracking cookies.
3. Third-Party Services
The BuildWorkPro marketing site loads typefaces from Google Fonts via a preconnect directive. When your browser requests font files from Google’s servers, Google may receive your IP address and set cookies in accordance with its own privacy practices. For details, see Google’s Privacy Policy.
We use Cloudflare Turnstile on our public forms (such as the contact form) to distinguish humans from bots without showing CAPTCHAs. Turnstile may set or read cookies and similar identifiers strictly for security and bot-mitigation purposes. This is a strictly necessary security function; see Cloudflare’s Privacy Policy for details.
We use the Meta (Facebook) Pixel on the marketing site for advertising measurement and retargeting. As described in Section 2.3, it loads only after you accept in the cookie banner; see Meta’s Privacy Policy.
We use PostHog for product analytics in the web application (Section 2.4) and, under the consent rules in Section 2.3, on the marketing website. Its cookie is first-party: it is set on our own domain, and the data is sent through our own servers to PostHog, which discards IP addresses rather than storing them; see PostHog’s Privacy Policy.
Other than Google Fonts, Cloudflare Turnstile, the consent-based Google Analytics and Meta Pixel, and the PostHog product-analytics cookie described above, no third-party service deployed on the Platform sets cookies in your browser.
4. Legal Basis for Cookie Use
Our use of cookies is grounded in the following legal bases:
- Strictly necessary cookies (Section 2.1): Exempt from consent requirements under the EU ePrivacy Directive, UK PECR, and analogous legislation, as they are essential for the provision of the service you have explicitly requested.
- Functional cookies (Section 2.2): Set under the lawful basis of legitimate interest (GDPR Art. 6(1)(f)), as they serve the purpose of improving your user experience without processing data in a manner that overrides your fundamental rights. You may disable these by clearing your browser’s local storage at any time.
- Analytics & advertising cookies (Section 2.3): Set only with your prior consent (GDPR Art. 6(1)(a) and the ePrivacy consent requirement), given through the cookie banner. You may withdraw consent at any time via the “Cookie settings” link in the footer; the Google Analytics and Meta Pixel scripts are not loaded unless and until you accept.
- Product analytics cookie (Section 2.4): Set in the web application under the lawful basis of legitimate interest (GDPR Art. 6(1)(f)) in understanding and improving the Platform, with all on-screen text and input masked and no names or email addresses collected. You may object at any time by contacting privacy@buildworkpro.com.
5. How to Manage Cookies
You may view, manage, and delete cookies through your browser’s privacy or security settings. Most modern browsers offer the following controls:
- View and delete individual cookies and local storage entries;
- Block all cookies or cookies from specific domains;
- Distinguish between first-party and third-party cookies;
- Automatically clear cookies and site data when you close the browser.
Important: Disabling strictly necessary cookies (Section 2.1) will prevent you from authenticating and using the BuildWorkPro application. Clearing functional cookies (Section 2.2) will reset your preferences to defaults but will not affect your ability to log in.
Instructions for common browsers:
- Google Chrome: Settings > Privacy and Security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Apple Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
6. Changes to This Policy
If we introduce new categories of cookies or materially change how we use existing cookies, we will update this Policy and notify users where required by law. Material changes will be communicated through the Platform or by email. The “Last Updated” date at the top of this page will reflect the most recent revision.
7. Contact Information
If you have questions about our use of cookies or this Policy, please contact us:
- Privacy Inquiries: privacy@buildworkpro.com
- Web: buildworkpro.com/contact/