Legal

Cookie Policy

Last updated 6 October 2026

Bract sets only the cookies it needs to work: one that keeps you signed in, a few short-lived ones that protect sign-up and linking your networks, and one that remembers you accepted this policy. There are no advertising, analytics or third-party tracking cookies on our pages. Because the service cannot run without them, you need to accept them to use it.

What cookies are

A cookie is a small piece of text a website asks your browser to keep and send back on later visits. It is how a site remembers that you are signed in from one page to the next. This policy lists every cookie Bract sets, and sits alongside our Privacy Policy.

The cookies we set

All of them are first-party, meaning they belong to Bract’s own domain and are never shared with anyone else.

  • Your session — socialy_session keeps you signed in. It holds a random identifier, never your user id or your password, and is set when you log in. It lasts 30 days or until you log out, whichever comes first.
  • A sign-up in progress — bract_pending_signup remembers which email address a verification code was sent to, so the code you type is matched to the right sign-up. It lasts 10 minutes and is removed once your account is confirmed.
  • Linking a network — oauth_state_<network> and oauth_popup_<network> are set when you connect Facebook, Instagram or TikTok. They prove the reply from the network belongs to the request you started, which stops anyone forging a connection to your account. They last ten minutes.
  • Your answer to this policy — bract_cookie_consent records that you accepted cookies, so you are not asked on every visit. It lasts 12 months, after which we ask again.

The session, sign-up and network cookies are HTTP-only, so no script running on the page can read them, and all of them are marked secure so they only travel over an encrypted connection.

Other storage in your browser

Once you are signed in, the dashboard keeps two small preferences in your browser’s local storage: whether you have already seen the introduction to Facebook Pages, and the last greeting it showed you so the next one is different. Neither is ever sent to our servers, and clearing your browser data removes both.

What we do not use

No analytics, no advertising, no social media pixels and no third-party cookies on our pages. Our fonts are served from our own domain, so loading Bract sends no request to Google or anyone else that could set a cookie of their own.

When you link a network, you are sent to that network’s own site to approve access. Facebook, Instagram and TikTok set their own cookies there, under their own policies, which we neither control nor see.

Why you need to accept them

Every cookie above is one Bract needs in order to work: without them you could not sign in, finish signing up, or link a network safely. So rather than offer a choice that would only break the service, we ask you to accept them before you sign in or create an account. The rest of the site, including this page, our Privacy Policy and our Terms & Conditions, stays readable before you do.

Removing them

You can delete Bract’s cookies at any time from your browser’s settings. Doing so signs you out, and you will be asked to accept this policy again on your next visit. If you block cookies for our domain altogether you will still be able to read the site, but you will not be able to sign in.

Changes to this policy

If we add a cookie or change what one is for, we will update this page and its date, and ask everybody to accept the revised policy before carrying on. Questions go to bractservices@gmail.com.