This Cookie Policy explains how BUBUU Inc. (Bubuu, we, us) uses cookies and similar technologies on bubuu.ai.
This policy is separate from our Terms and Conditions and Privacy Policy because cookie tools and website technologies may change more often.
Contact: info@bubuu.ai
1. What Cookies and Similar Technologies Are
Cookies are small files stored on your device when you visit a website. Similar technologies include local storage, pixels, tags, SDKs, and scripts that store or access information on your device or browser.
These technologies can help websites work, remember choices, measure use, provide support tools, secure sessions, and support marketing or analytics where allowed.
2. How Bubuu Uses These Technologies
Bubuu may use cookies and similar technologies to:
- operate the website and public service;
- keep the service secure;
- remember cookie choices and basic preferences;
- support AI chat, report workflows, support, and customer communication tools;
- manage sessions or authentication if account/session tools are used;
- understand website and product performance;
- improve the service;
- run marketing or advertising only where implemented and where required consent is obtained.
3. Cookie Categories
| Category | What it means | Consent status |
|---|---|---|
| Strictly necessary | Required for website operation, security, consent storage, basic functionality, and requested service features. | May be used without consent where technically necessary to provide the service you request. |
| Preferences | Remember language, region, display settings, or similar choices. | Consent may be required depending on implementation. |
| Analytics/performance | Help us understand website use, product analytics, errors, and service performance. | Consent required unless a specific legal exemption applies. |
| Support/chat/customer communication | Support widgets, chat tools, helpdesk tools, or similar customer communication features. | Consent may be required depending on tool and use. |
| Authentication/session | Session management, login, identity, fraud prevention, or authentication tools. | Strictly necessary where required for requested login/session functionality; otherwise consent may be required. |
| Marketing/advertising | Marketing tags, retargeting, advertising measurement, or campaign tracking. | Consent required unless a specific legal exemption applies. |
4. Cookie Inventory
Cookie scan date: 12.07.2026
Your cookie preferences are managed directly through our website’s built-in consent tool. You can view, modify, or withdraw your consent at any time by clicking the 'Cookie settings' button located in the footer of our website. This will open a settings menu where you can adjust your preferences.
| Name | Provider | Category | Purpose | Duration | Type | Legal basis / consent status |
|---|---|---|---|---|---|---|
| bubuu_access | Bubuu (first-party) | Authentication/session | Access-code gate; presence authorizes portal access (the active auth mechanism today) | 30 days | First-party | Strictly necessary - no consent required |
| cc_cookie | vanilla-cookieconsent (self-hosted) | Preferences (strictly-necessary) | Stores the visitor's cookie-consent choices + revision | 182 days | First-party | Strictly necessary - it is the consent record itself |
| NEXT_LOCALE | next-intl | Preferences | Remembers chosen / geo-detected language + region | 1 year | First-party | Strictly necessary (functional) |
| bubuu_welcome_ack | Bubuu (first-party) | Preferences (functional) | Remembers dismissal of the welcome / legal-disclosure gate | 1 year | First-party | Strictly necessary (functional) |
| ph_<PROJECT_KEY>_posthog | PostHog (EU Cloud) | Analytics/performance | Distinct-id + session-id linking visits into a funnel | 365 days | First-party in practice (same-origin /ingest proxy; vendor eu.i.posthog.com) | Consent required - opt-in (EU); opt-out by default until 'analytics' accepted |
| __session | Clerk | Authentication/session | Short-lived session JWT proving auth on each request | ~1 min token (auto-ref reshed); session up to 7 days default | First-party | Strictly necessary |
| __client | Clerk | Authentication/session | Long-lived client reference used to mint session tokens | Long-lived (browser-capped ~400 days) | Third-party today (Clerk FAPI domain) / first-party with a custom Clerk domain | Strictly necessary |
| __client_uat | Clerk | Authentication/session | Timestamp flag so tabs detect sign-in/out without a network call | Session / mirrors client | First-party | Strictly necessary |
| __clerk_handshake | Clerk | Authentication/session | Transient handshake cookie during middleware auth sync | Transient (seconds) | First-party | Strictly necessary |
| visitorId | Bubuu in-house fingerprint | Strictly-necessary (anti-abuse) | Device-fingerprint hash sent as X-VISITOR-ID header for anti-fraud | Until cleared | First-party | Strictly necessary / legitimate interest |
| localId | Bubuu | Strictly-necessary (anti-abuse) | Random UUID device/session correlation sent as X-LOCAL-ID header | Until cleared | First-party | Strictly necessary / legitimate interest |
| mantine-color-scheme-value | Mantine (self-hosted) | Preferences | Light/dark theme choice | Until cleared | First-party | Functional |
| bubuu-currency | Bubuu | Preferences | Display-currency choice | Until cleared | First-party | Functional |
| bubuu-area-unit | Bubuu | Preferences | Area unit (sqft/sqm) | Until cleared | First-party | Functional |
| bubuu-analytics-disable | Bubuu | Analytics (dev kill-switch) | Manual analytics opt-out flag | Until cleared | First-party | Functional |
| __ph_opt_in_out_<KEY> | PostHog | Analytics/performance | Remembers PostHog opt-in/out state | Until cleared | First-party | Consent record |
| ph_<KEY>_window_id / _primary_window_exists | PostHog | Analytics/performance | Tab/session bookkeeping for a stable session_id | Session | First-party | Consent required |
| mapbox.eventData / .uuid | Mapbox | Analytics/telemetry | Anonymous map-usage telemetry beacon to events.mapbox.com | Until cleared | Third-party | Legitimate interest / consent |
| _cfuvid | Cloudflare | Strictly-necessary (anti-bot) | Cloudflare bot-management on Clerk's domains | Session | Third-party | Strictly necessary |
| NEXT_LOCALE | next-intl | Preferences | UI language | 1 year | First-party | Strictly necessary (functional) |
| mantine-color-scheme-value | Mantine (self-hosted) | Preferences | Light/dark theme choice | Until cleared | First-party | Functional |
| bubuu_welcome_ack | Bubuu | Preferences (functional) | Remembers dismissal of the welcome / legal-disclosure gate | 1 year | First-party on the partner's domain | Strictly necessary (functional) |
| bubuu-chat-id[:<partnerId>] | Bubuu | Support/chat (session) | Chat-conversation continuity within the browser tab | Session (cleared on tab close) | First-party on the partner's domain | Strictly necessary |
| bubuu-consent-region | Bubuu | Preferences (QA) | Manual EU/US consent-regi on override for testing | Session | First-party | Strictly necessary (functional) |
| __clerk_db_jwt | Clerk | Authentication/session | Dev-browser token across localhost and *.accounts.dev | N/A (query-string; dev only) | Third-party (accounts.dev) | Strictly necessary |
5. Third-Party Tools
Bubuu may use third-party providers for hosting, security, authentication/session management, analytics, support/chat, AI chat/report workflows, customer communication, and marketing tools.
Third-party providers:
- Clerk, for authentication and session-related technologies.
- PostHog, for analytics and performance measurement.
- Freshworks, for CRM, lead management, and client communication tracking.
- Mapbox, for interactive map interfaces and related telemetry.
- Vercel, for frontend hosting, deployment infrastructure, and security logging.
- Cloudflare, for core infrastructure, DNS resolution, and security routing.
For more information about personal data processing, vendors, transfers, and your rights, see the Privacy Policy.
6. Consent and How to Change Your Choices
Strictly necessary cookies and similar technologies may be used without consent where they are technically required to provide the website or service you request.
You can accept or reject non-essential cookies. Non-essential cookies and tracking technologies should not load before consent unless a specific legal exemption applies.
This includes analytics, marketing, and some support/chat or preference technologies depending on how they are implemented.
You can withdraw or change your cookie choices at any time through the 'Cookie settings' button located in the footer of our website, which will reopen the preferences menu.
You can also block or delete cookies through your browser settings. If you block or delete cookies, some website or service features may not work properly. For your US privacy rights and preferences, see https://bubuu.ai/en-US/docs/privacy-policy.
U.S. State Privacy Disclosures
If you are a resident of California or another U.S. state with a comprehensive privacy law, the following disclosures apply in addition to the choices described above.
Sale, sharing, and targeted advertising. Some marketing or advertising technologies, if enabled, may involve the "sale" or "sharing" of personal information, or "targeted advertising," as those terms are defined under the California Consumer Privacy Act (as amended by the CPRA) and similar state laws. Your U.S. privacy rights and choices — including any right to opt out and to limit the use of sensitive personal information — are described in our Privacy Policy.
Do Not Track. Some browsers offer a "Do Not Track" (DNT) signal. Because there is no common industry standard for how to respond to DNT, we do not respond to DNT signals. The opt-out preference signals we do recognize, and how to exercise your privacy choices, are described in our Privacy Policy.
Children. We do not knowingly use cookies or similar technologies to sell or share the personal information of consumers under 16 years of age.
More information. For the categories of personal information collected through these technologies, the purposes of use, the recipients, your rights, and how to exercise them, see our Privacy Policy.
7. Updates
Bubuu may update this Cookie Policy when cookies, vendors, website features, legal requirements, or consent tools change.
The cookie inventory may be updated after meaningful website or vendor changes and updated cookie scans.
8. Contact
For cookie or privacy questions, contact: