Cookies
If you are just looking around, this site sets you no cookies at all. Only signing in to the client portal sets one: the cookie that keeps you signed in. It is strictly necessary, so there is still no banner in your way. Two small values also live in your browser’s session storage while a tab is open.
The full list
One cookie, and two things that are not cookies but are storage on your device either way:
| Name | What it does | Type | Expires |
|---|---|---|---|
| bf_session (cookie) | Keeps you signed in to the client portal after you have typed your password. It is only set if you sign in, and holds no name and no email address — only a randomly drawn key to your session on our own server. Scripts cannot read it (HttpOnly) and other sites cannot make your browser send it (SameSite=Lax). | Strictly necessary: without this cookie you cannot stay signed in | 14 days, or the moment you sign out — at which point it is void on our server too. |
| bf-seen (session storage) | Remembers that you have already watched the opening animation, so it does not play again every time you move between pages. | Functional, strictly necessary for the interface behaving sensibly | When you close the tab. |
| bf-attr (session storage) | Remembers how you arrived — any campaign parameters in the link you clicked, the domain of the site that linked you, and the first page you landed on — so that if you send the enquiry form, we can tell which advertising or referral produced it. It is read only when you send the form, and only sent along with it. | Functional; our legitimate interest in knowing what produces enquiries (Article 6(1)(f)) | When you close the tab. |
Requests to other servers
The only file this page fetches from anywhere other than this domain is our own visitor counter, served from a subdomain we run on our own server. Everything else — the stylesheet, the scripts, both typefaces, every image — comes from this domain. No other company sees your IP address, because your browser never contacts one. The typefaces used to come from Google's font servers and the placeholder imagery from an image service; both are served from here now.
Refusing them anyway
Every browser can block or delete site storage under its privacy settings. On the public site that costs you nothing: the enquiry form keeps working, the opening animation plays once more, and that is all. The client portal cannot keep you signed in without that one cookie — which is exactly why it is called strictly necessary. Email works in any case: hello@brandforge.be.