COOKIE POLICY

Brizop AI Commerce Operating System

Last updated: May 2026

Status: This is a comprehensive draft prepared for legal review. Fields marked [in brackets] require your specific details. This policy is designed to comply with the UK GDPR, the EU GDPR, the Privacy and Electronic Communications Regulations (PECR), and the EU ePrivacy Directive.

1. What Are Cookies

Cookies are small text files placed on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work efficiently, remember your preferences, and provide information to site owners. Cookies may be set by the website you visit ("first-party cookies") or by third-party services ("third-party cookies").

This policy explains what cookies we use, why we use them, and how you can control them. It should be read alongside our Privacy Policy and our Terms of Service.

2. How We Use Cookies

We use cookies for the following purposes:

3. Cookie Table

The following table lists the cookies that may be set when you visit our website or use our platform. Not all cookies are set for every visitor — some are activated only when you interact with specific features.

Cookie Name Provider Category Purpose Duration
PHPSESSID / session_id Brizop Essential Maintains your session state and authentication across page requests Session
XSRF-TOKEN Brizop Essential Cross-site request forgery protection token Session
cookie_consent Brizop Essential Stores your cookie consent preference so we don't re-show the banner 12 months
_ga Google Analytics (GA4) Analytics Distinguishes unique users and calculates visitor, session, and campaign data 2 years
_ga_<container-id> Google Analytics (GA4) Analytics Persists session state and enables event tracking 2 years
_gid Google Analytics (GA4) Analytics Distinguishes unique users (24-hour expiry) 24 hours
_gat_gtag_* Google Analytics (GA4) Analytics Throttles request rate (used to limit data collection on high-traffic sites) 1 minute
_hjSessionUser_* Hotjar Analytics Persists Hotjar user ID for session recording and heatmap analysis 12 months
_hjSession_* Hotjar Analytics Holds current session data and ensures subsequent requests are attributed to the same session 30 minutes
_hjAbsoluteSessionInProgress Hotjar Analytics Detects the first pageview session to determine session recency 30 minutes
_hjIncludedInPageviewSample Hotjar Analytics Determines if the user is included in Hotjar's pageview sampling 2 minutes
_hjIncludedInSessionSample Hotjar Analytics Determines if the user is included in Hotjar's session sampling 2 minutes
_hjRecordingLastActivity Hotjar Analytics Updates during recording to detect whether the user is still active Session
_hjRecordingEnabled Hotjar Analytics Tracks whether session recording is enabled for the current session Session
_hjLocalStorageTest Hotjar Analytics Checks if localStorage is available (used for cache-busting) Under 100ms
_gaexp Google Optimize / GA4 Analytics Used for A/B testing and experiment participation tracking 90 days
_gcl_au Google Ads Advertising Conversion tracking and ad attribution for Google Ads campaigns 3 months
_fbp Meta (Facebook) Advertising Delivers and measures Facebook ad performance and retargeting 3 months
_ttclid TikTok Advertising Click tracking and conversion attribution for TikTok Ads Session / 1 year
_ttp TikTok Advertising Measures and improves ad performance, personalises TikTok content 13 months
IDE Google (DoubleClick) Advertising Used for remarketing, ad personalisation, and conversion tracking 13 months
test_cookie Google (DoubleClick) Advertising Checks if the user's browser supports cookies 15 minutes
_uetsid Microsoft (Bing Ads) Advertising Bing Ads conversion tracking and attribution 24 hours
_uetvid Microsoft (Bing Ads) Advertising Bing Ads visitor identification and remarketing 16 days
personalization_id Twitter/X Advertising Twitter Ads conversion tracking and retargeting 12 months

Please note: This list is not exhaustive and may change as we add or remove third-party services. We will update this policy accordingly.

4. Third-Party Cookies

We use the following third-party services that may set cookies:

Each of these services has its own privacy and cookie policies. We encourage you to review them:

5. Consent

When you first visit our website, you are presented with a cookie consent banner that:

Your consent choice is stored in a cookie (cookie_consent) for 12 months. After this period, or if you clear your cookies, the banner will reappear.

You may change your cookie preferences at any time by clicking the cookie settings link in the footer of our website.

6. How to Manage Cookies

In addition to our consent banner, you can control cookies through your browser settings. Most browsers allow you to:

Please note that disabling certain cookies may affect the functionality of our website and platform. Essential cookies cannot be disabled without impacting core features.

Links to browser cookie management guides:

7. Do-Not-Track Signals

Our website currently does not respond to Do-Not-Track (DNT) browser signals, as there is no consistent industry standard for interpreting DNT signals. We continue to monitor developments in this area.

8. Policy Updates

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, legal requirements, or our practices. Material changes will be notified via our website or email. The "Last updated" date at the top of this page indicates the most recent revision.

9. Contact Us

If you have any questions about this Cookie Policy or our use of cookies:

Email: privacy@brizop.com
Phone: +44 7380 936147
Data Protection Officer: care of privacy@brizop.com
Post: [Full postal address, Kent, United Kingdom]