Our website allows third parties to place or read cookies. BridgeSync does not set these third-party cookies itself. They are set by service providers whose functionality or services we use. Below is an overview of the third parties that may place cookies via our website, why they do so, and whether data may be processed outside the EU.
Google Analytics (Google LLC)
Purpose:
These cookies (e.g. _ga, _gid, _gat) measure how visitors use our site (e.g. page views, duration, referral sources). BridgeSync uses these statistics to improve the site.
Personal data:
Anonymised IP addresses (where possible), unique identifiers, and aggregated usage data.
Retention period:
The main cookie, '_ga', is valid for two years. Other Analytics cookies vary, from one minute to 24 hours or several months.
Third parties/Transfers:
Google LLC is based in the U.S. Any data collected via Analytics will be stored on servers outside the EU (e.g., in the U.S.). Google must adhere to EU rules regarding data handling, or the EU–US Data Privacy Framework if applicable. This guarantees the protection of your data during transfer.
Google Tag Manager (Google LLC)
Purpose:
It's a tag management system that allows us to load and manage other scripts and cookies on our site. Tag Manager does not collect personal data for analytics; it simply serves as a technical tool to activate tags like Google Analytics or pixels. Tag Manager sometimes uses a cookie to sort out the loading order, but it doesn't set tracking cookies on its own.
Retention period:
This doesn't usually apply, or it's very short, like when it's in preview or test mode.
Third parties/Transfers:
Google LLC (US) is also involved as a service provider. As with Analytics, technical information may be sent to Google's servers in the US.
Cloudflare (Cloudflare, Inc.)
Purpose:
Cloudflare provides a Content Delivery Network (CDN) and security services (like DDoS protection and bot management). Cloudflare uses only the strictly necessary cookies to manage traffic and block malicious requests. The cookie __cf_bm helps to tell the difference between automated bot traffic and real users. This cookie contains a random identifier and some metadata used by Cloudflare for a bot score, which is encrypted (we can't read it).
Retention period:
Cloudflare security cookies are short-lived: The __cf_bm cookie expires after 30 minutes of inactivity, and other Cloudflare cookies (such as load balancing session cookies) remain active for a few hours to 24 hours.
Third parties/Transfers:
Cloudflare, Inc. is a US company. Cloudflare processes your cookie data in data centres in the US. We also use Standard Contractual Clauses for data transfers. Cloudflare asserts that all its cookies are "strictly necessary" for the security service. However, we have listed them here in case you want to know.
YouTube (Google LLC)
Purpose:
Our site embeds YouTube videos. When you play a YouTube video on our site, YouTube sets various cookies. These help the video player work (e.g. remembering preferences or bandwidth) and may track what you watch and link it to your Google profile for advertising and recommendations. Examples include YSC (a session cookie that keeps your video player interactions in the same session) and VISITOR_INFO1_LIVE (which is valid for around six months). It can estimate bandwidth and optimise streaming, and may also use ad cookies (such as IDE via DoubleClick, 13 months in the EEA) for personalised ads.
Personal data:
It will show you viewing history, device IP address, any Google account information if you're logged in, and demographic data as far as Google knows.
Third parties/Transfers:
YouTube is a service provided by Google LLC (U.S.). When these cookies are active, Google receives information about your video activity. This data may be transferred to servers outside the EU, including the United States. Google also uses this data for YouTube Analytics and ad personalisation. Google applies contractual safeguards to these transfers, but users should be aware that U.S. authorities may be able to access data in certain circumstances. If you do not consent to marketing cookies, embedded YouTube videos may not load until you choose to enable them.
WooCommerce (a plugin by Automattic Inc.).
Purpose:
WooCommerce provides the e-commerce functionality on our site (e.g. shopping cart and checkout). WooCommerce uses functional first-party cookies (see the Functional Cookies section for more information) to ensure you have the best shopping experience. For example, cookies track items in your cart and a session ID links your order information on the server temporarily.
Personal data:
These cookies do not store anything that can directly identify you, but they do link your browser to server-side information (like what's in your cart or your order status).
Retention period:
Most WooCommerce cookies are just session-based, so they're removed as soon as you close your browser. There's just one cookie left, which will last for about two days. You can come back and restore your cart later if you need to.
Third parties/Transfers:
WooCommerce cookies are first-party cookies on our own domain. We never send information to Automattic or anyone else; it's all processed on our own website/server here in the EU. You can be absolutely certain that this cookie information is not being transferred outside the EU.
WordPress (Automattic Inc.)
Purpose:
Our website uses WordPress CMS. WordPress sets a limited number of functional cookies to keep the site working properly and improve usability. For example, wordpress_test_cookie checks whether your browser accepts cookies. Logged-in users may also receive cookies such as wordpress_logged_in_{hash} to maintain their login session, while comment_author_{hash} may remember a name and email address for future comments for approximately 347 days.
Personal data:
These cookies save your account IDs and other info you've entered, like your name and email address, in your browser so you don't have to enter it again.
Retention period:
When it comes to logged-in WordPress users, cookies are usually of the session variety (they expire on logout or when you close your browser). Comment cookies, on the other hand, are stored for around 347 days.
Third parties/Transfers:
These cookies are on our own domain, just like WooCommerce. Rest assured, the data will not be automatically sent to Automattic or other outside parties. Automattic does not track us unless we use extra plugins that send data, which we do not use here. These WordPress cookies are functional and don't involve international transfers.