Cookies
We use essential cookies to operate the website. With your consent to Analytics, our own systems and Google Analytics measure approved public content pages and selected interactions. Separate consent to Advanced analytics additionally enables Google signals for aggregated demographic, interest, and cross-device reporting. The Google tag loads only after consent. Portal and login pages, URL query parameters, and form content remain excluded. On project-wizard and professional-signup pages, after consent we transmit only content-free success signals for completed project requests or newly created professional accounts. Google Ads, remarketing, and personalised advertising remain disabled. External media such as YouTube also loads only after consent.
Legal
Here we explain which cookies we use, what they are for, and how long they are stored.
Last updated: 3 August 2026
This cookie information describes which cookies and similar technologies beeBAAHM GmbH uses on the marketing site, on customer referral pages, and in the portal.
When you change the language through the marketing site's language selector, we store the selection in the NEXT_LOCALE cookie for 6 months. This lets navigation and public pages open in the language last chosen on your next visit.
External media, for example YouTube, is loaded only after you consent in our cookie banner. Without consent, we show a placeholder.
Google Analytics loads only after you consent to the Analytics category. Google signals is used only with additional consent to Advanced analytics. Before consent, no Google tag is loaded and no data is transferred to Google Analytics.
Public images and videos may be delivered through the technically necessary Cloudflare R2 media host media.beebaahm.com. R2 does not set analytics or marketing cookies merely to deliver files. If an enabled Cloudflare security function needs a cookie in an individual case, it is used only for security and delivery of the requested service.
Maps in the portal (MapLibre/OpenFreeMap) are functionally necessary and are loaded only in the signed-in area. Based on the current state, we do not use additional third-party tracking cookies for this.
Stripe's embedded payment form is loaded only when you open the payment step of a subscription checkout or change your payment method in the portal. Stripe.js and the Stripe Payment Element may use technically necessary cookies, local identifiers and similar technologies to provide the payment session, recognise the device, perform required authentication and prevent fraud. We do not use these Stripe technologies for advertising or audience measurement. Because you expressly request the payment service and these technologies are required to provide it securely, we classify them as essential. Stripe describes the types, purposes and current retention periods at https://stripe.com/legal/cookies-policy.
On customer referral pages, we set a first-party referral attribution cookie only after visitors actively consent to analytics and referral attribution in the classic cookie banner. The shared short link does not contain the referring customer's name.
We do not use advertising, remarketing, or cross-site tracking pixels. If you consent to Analytics, our own systems and Google Analytics record controlled page views and selected interactions on approved public content pages. These include scroll depth, outbound clicks, public downloads, embedded videos, safe signals for completed searches and wizard starts, and only the fact that a public form was started or submitted. On project-wizard and professional-signup pages, we transmit only content-free success signals for a completed project request or a newly created professional account. Content and input values are not transferred. With separate consent to Advanced analytics, Google signals can add aggregated demographic, interest, and cross-device reporting.
Where possible, marketplace, funnel, and SaaS KPIs in the admin dashboard are derived from existing domain data such as projects, offers, awards, subscriptions, and invoices. We do not add extra real-time or polling trackers in the frontend for this.
When you allow analytics
What we do not do
| Cookie | Purpose | Category | Storage duration |
|---|---|---|---|
| bbm_cookie_consent | Stores your cookie selection (analytics/advanced analytics/media). | Essential | 180 days |
| NEXT_LOCALE | Stores the language selection on the marketing site and in navigation. | Functional | 6 months |
| userLocation | Localises content (city name from IP geolocation). | Functional | 7 days |
| userCountry | Country code for language and regional logic. | Functional | 7 days |
| userLat | Approximate location coordinate for regional suggestions. | Functional | 7 days |
| userLon | Approximate location coordinate for regional suggestions. | Functional | 7 days |
| bbm_public_analytics_session_id | Short-lived pseudonymous session ID for consent-based first-party page and CTA analytics on public pages. | Analytics (consent) | 2 days |
| bbm_blog_session_id / bbm_blog_session_day | Short-lived pseudonymous session markers for consent-based first-party reach measurement and duplicate-count prevention, for example blog views. | Analytics (consent) | 2 days |
| _ga / _ga_T0RH90YKLQ | First-party cookies set by Google Analytics to distinguish users and sessions pseudonymously on approved public content pages and for consented content-free conversion signals and, with separate consent, for Google signals reporting. | Analytics (consent) | 90 days from initial consent |
| bb_hero_image_state | Controls image rotation in the homepage hero so mobile and desktop show the same image group consistently and no group appears more than twice in a row. | Essential | Session |
| big-calendar-theme | Stores the calendar theme (portal). | Functional | 1 year |
| sidebar:state | Stores the sidebar state in the portal. | Functional | 7 days |
| bbm_affiliate | Attribution of affiliate links for partner signups (first-party cookie including server-side event tracking). | Functional | 60 days |
| bbm_customer_referral | After consent, stores a pseudonymous referral token so a project created later can be attributed to the accepted customer referral link. | Functional (consent) | 60 days |
| bb_cps_like_* | Stores in the browser whether a community project story was liked in the current 7-day period. Server-side pseudonymous hashes prevent duplicate likes and allow likes to be withdrawn. | Functional | 7 days |
| bb_auth / bb_auth_mode / bb_auth_exp | Portal login via Supabase session cookies including persistence mode and expiry metadata for stay signed in. | Essential | Session / up to 90 days depending on login mode |
| __next_hmr_refresh_hash__ | Hot reload state (local development only). | Development | Session |
We also use local storage for UI settings, portal sessions, and our own consent-based analytics. Google Analytics uses the cookies listed separately below, but none of the local-storage entries named here.
| Entry | Purpose | Storage duration |
|---|---|---|
| theme | Stores the UI color variant (light/dark). | Until deletion |
| bbm_public_analytics_session_id | Pseudonymous session ID for consent-based first-party page and CTA analytics on public pages. | 2 days |
| bbm_blog_session_id | Pseudonymous session ID for consent-based first-party reach measurement and duplicate-count limiting. | 2 days |
| bbm_blog_session_day | Day marker for consent-based first-party reach measurement and duplicate-count prevention. | 2 days |
| bb-refresh-* | Refresh marker for portal data, for example projects. | Until deletion |
| sustain:seen:* | Stores read notices and UI states in the portal. | Until deletion |
| chat:avatarSignedUrls:v1 | Cache for avatar URLs in chat. | Until deletion |
Session storage is used only for the current session and is deleted when the browser is closed.
| Entry | Purpose |
|---|---|
| breadcrumb:project | Stores the project context in the wizard. |
| project:public_id:* | Short-term project references in the portal. |
| chat:filesCount:* / chat:lastPartnerName:* | Chat states, for example file counts and last partner names. |
| bbm_partner_comparison_check_session_id | Pseudonymous session ID for the consent-based digitalisation check on the comparison page. Prevents duplicate records when navigating back/forward, refreshing, or checking again. |
| Service | Purpose | Category |
|---|---|---|
| Google Analytics (Google Ireland Limited) | Consent-based reach and interaction measurement on approved public content pages, including scroll depth, outbound clicks, public downloads, videos, approximate location/device data, safe search and wizard-start signals, and content-free form and conversion events. On project-wizard and professional-signup pages, only successful completions without form content are measured. Google signals for aggregated demographic, interest, and cross-device reporting only with separate consent. No Google Ads, remarketing, personalised advertising, or user-provided data. | Analytics (consent) |
| youtube-nocookie.com | YouTube videos in enhanced privacy mode (only after consent). | External media |
| Cloudflare R2 / media.beebaahm.com | Technically necessary storage and delivery of deliberately public images, videos, and other media. The basic R2 file delivery does not use analytics, marketing, or cross-site tracking cookies; any Cloudflare security cookie is used only if an enabled protection feature requires it for the requested service. | Essential |
| MapLibre + OpenFreeMap | Map display in the portal via MapLibre; map styles and tiles are loaded through OpenFreeMap (tiles.openfreemap.org). | Functional |
| Stripe.js / Stripe Payment Element (Stripe Payments Europe, Limited) | Embedded collection of credit or debit card and SEPA Direct Debit details, payment and mandate session handling, strong customer authentication, security and fraud prevention. The service loads only in the expressly opened payment step or when changing the payment method. Stripe may store or read cookies and similar identifiers on Stripe domains; their types and duration follow Stripe's current Cookies Policy. beeBAAHM does not use them for advertising or analytics. | Essential |
You can change your selection at any time through Cookie settings or delete cookies in your browser. Please note that individual functions may then be limited.
We update this notice when the technologies we use change.
