Legal
Cookie Policy
Effective Date: April 9, 2026 · Last Updated: June 23, 2026
This Cookie Policy (“Policy”) explains how BuildWorkPro LLC (“BuildWorkPro,” “we,” “us,” or “our”) uses cookies and similar client-side storage technologies on the BuildWorkPro platform and marketing website (collectively, the “Platform”). This Policy should be read in conjunction with our Privacy Policy.
1. What Are Cookies
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) by a website when you visit it. Cookies enable the website to recognize your device, maintain session state, and store your preferences. They are widely used to make websites function correctly, function more efficiently, and provide information to site operators.
In addition to traditional cookies, this Policy also covers the use of browser local storage (localStorage) and session storage (sessionStorage), which serve similar purposes but have different technical characteristics.
2. Cookies We Use
BuildWorkPro employs a minimal, privacy-respecting approach to cookies. We categorize our cookies as follows:
2.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled without rendering core features inoperable. Under applicable privacy laws, including the EU ePrivacy Directive (2002/58/EC as amended) and the UK Privacy and Electronic Communications Regulations (PECR), no consent is required for strictly necessary cookies.
| Cookie / Storage | Purpose | Duration |
|---|---|---|
connect.sid | Session authentication — maintains your logged-in state as you navigate the Platform. Contains a cryptographically signed session identifier; does not contain your password or personal data in plaintext. | Expires after 24 hours of inactivity or 30 days maximum. |
| CSRF token | Cross-site request forgery protection — ensures that form submissions and API requests originate from the BuildWorkPro application and not from a malicious third-party site. | Per session. |
| Tenant context | Identifies the organization you are currently operating within in our multi-tenant environment, ensuring that data requests are scoped to your organization. | Per session. |
2.2 Functional / Preference Cookies
These cookies and local storage entries remember your settings and interface choices to provide a more consistent user experience. They are set under the lawful basis of legitimate interest and do not track you across other websites.
| Cookie / Storage | Purpose | Duration |
|---|---|---|
| Theme preference | Stores your light or dark mode selection. | Persistent (localStorage). |
| Language / locale | Stores your preferred language and date/number format settings. | Persistent (localStorage). |
| UI state | Remembers interface preferences such as sidebar collapsed/expanded state, table column visibility, and sort order. | Persistent (localStorage). |
bwp-cookies-accepted / bwp-cookies-declined | Records the choice you made in the cookie consent banner on the marketing site, so we do not ask again and can honor your decision on every page. | Persistent (localStorage). |
2.3 Analytics & Advertising Cookies (Consent-Based, Marketing Site Only)
The BuildWorkPro marketing website uses Google Analytics 4 to understand how visitors find and use our pages, and the Meta (Facebook) Pixel to measure the performance of our advertising and to show relevant ads to people who have visited the site. We handle these two technologies differently:
- Google Analytics 4 runs under Google Consent Mode v2 with every signal denied
by default. In that state it sets no cookies and sends only anonymized, aggregated
measurement pings (no advertising identifiers). It begins using cookies such as
_gaonly after you click “Accept.” If you click “Decline,” Google Analytics is disabled entirely and sends nothing. - The Meta (Facebook) Pixel has no cookieless mode, so its script is not loaded at all until you click “Accept.” If you decline or ignore the banner, the Pixel never loads and none of its cookies are set.
You can change your choice at any time via the “Cookie settings” link in the footer.
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Set by Google Analytics (only after you accept) to distinguish unique visitors. | Up to 2 years. |
_ga_* | Set by Google Analytics (only after you accept) to maintain session state for our measurement property. | Up to 2 years. |
_fbp | Set by the Meta Pixel (only after you accept) to identify browsers for ad measurement and delivery. | Up to 3 months. |
fr / _fbc | Set or read by Meta (only after you accept) for advertising attribution and retargeting when you arrive from or interact with a Meta ad. | Up to 3 months. |
None of these cookies are used inside the BuildWorkPro application itself. For details on how these third parties process data, see Google’s Privacy Policy and Meta’s Privacy Policy.
Separately, account-signup conversions are measured server-side via Meta’s Conversions API, which is not a cookie and sets nothing in your browser; see our Privacy Policy for how that hashed data is processed.
2.4 Cookies We Do Not Use
We do not deploy any of the following:
- Advertising cookies without consent: The Meta Pixel described in Section 2.3 is the only advertising/retargeting technology we use, and it loads strictly after you accept. We do not use any advertising or conversion-tracking cookies before consent, and we do not use other ad networks’ tags (e.g., Google Ads remarketing, LinkedIn Insight Tag).
- Session recording or heat-mapping tools: We do not use Hotjar, FullStory, or any similar session replay service.
- Social media widget cookies: We do not embed social media widgets, share buttons, or login plugins that set third-party tracking cookies.
3. Third-Party Services
The BuildWorkPro marketing site loads typefaces from Google Fonts via a preconnect directive. When your browser requests font files from Google’s servers, Google may receive your IP address and set cookies in accordance with its own privacy practices. For details, see Google’s Privacy Policy.
We use Cloudflare Turnstile on our public forms (such as the contact form) to distinguish humans from bots without showing CAPTCHAs. Turnstile may set or read cookies and similar identifiers strictly for security and bot-mitigation purposes. This is a strictly necessary security function; see Cloudflare’s Privacy Policy for details.
We use the Meta (Facebook) Pixel on the marketing site for advertising measurement and retargeting. As described in Section 2.3, it loads only after you accept in the cookie banner; see Meta’s Privacy Policy.
Other than Google Fonts, Cloudflare Turnstile, and the consent-based Google Analytics and Meta Pixel described above, no third-party service deployed on the Platform sets cookies in your browser.
4. Legal Basis for Cookie Use
Our use of cookies is grounded in the following legal bases:
- Strictly necessary cookies (Section 2.1): Exempt from consent requirements under the EU ePrivacy Directive, UK PECR, and analogous legislation, as they are essential for the provision of the service you have explicitly requested.
- Functional cookies (Section 2.2): Set under the lawful basis of legitimate interest (GDPR Art. 6(1)(f)), as they serve the purpose of improving your user experience without processing data in a manner that overrides your fundamental rights. You may disable these by clearing your browser’s local storage at any time.
- Analytics & advertising cookies (Section 2.3): Set only with your prior consent (GDPR Art. 6(1)(a) and the ePrivacy consent requirement), given through the cookie banner. You may withdraw consent at any time via the “Cookie settings” link in the footer; the Google Analytics and Meta Pixel scripts are not loaded unless and until you accept.
5. How to Manage Cookies
You may view, manage, and delete cookies through your browser’s privacy or security settings. Most modern browsers offer the following controls:
- View and delete individual cookies and local storage entries;
- Block all cookies or cookies from specific domains;
- Distinguish between first-party and third-party cookies;
- Automatically clear cookies and site data when you close the browser.
Important: Disabling strictly necessary cookies (Section 2.1) will prevent you from authenticating and using the BuildWorkPro application. Clearing functional cookies (Section 2.2) will reset your preferences to defaults but will not affect your ability to log in.
Instructions for common browsers:
- Google Chrome: Settings > Privacy and Security > Cookies and other site data
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data
- Apple Safari: Preferences > Privacy > Manage Website Data
- Microsoft Edge: Settings > Cookies and site permissions > Manage and delete cookies and site data
6. Changes to This Policy
If we introduce new categories of cookies or materially change how we use existing cookies, we will update this Policy and notify users where required by law. Material changes will be communicated through the Platform or by email. The “Last Updated” date at the top of this page will reflect the most recent revision.
7. Contact Information
If you have questions about our use of cookies or this Policy, please contact us:
- Privacy Inquiries: privacy@buildworkpro.com
- Web: buildworkpro.com/contact/