Cookie Policy

Cookies and similar storage technologies allow a website to remember information about a browser or device. This Policy explains the categories bdoor may use and the choices available.

Strictly necessary

Required for security, authentication, language routing, load balancing, fraud prevention, form continuity and saved cookie choices. These operate because the requested website cannot function securely without them.

Preferences

Remember optional settings such as currency or display choices. These should load only after the required consent or choice.

Analytics

Help measure page performance and service usage. Analytics must use data minimisation, mask or exclude sensitive fields and remain disabled until required consent is obtained. Application, KYC, payment and document pages must never be recorded through session replay.

Marketing

Used to measure or personalise advertising. bdoor must not activate this category unless a real marketing vendor is integrated, the vendor is disclosed and the required opt-in has been obtained.

bdoor currently sets only first-party cookies and device storage:

• Authentication cookies (names beginning “sb-”) — strictly necessary. Set when an account signs in, so the session stays active and verified while the workspace is used. They are refreshed during use and removed when the session ends or is signed out.
• bdoor_draft — strictly necessary. A random reference that lets an unfinished application draft be reopened. It expires after 30 days and contains no personal information itself.
• BDOOR_LOCALE — preference. Remembers the chosen language (English or Bangla) for up to one year so pages open in the right locale.
• bdoor_intake_draft (browser localStorage, not a cookie) — strictly necessary. Holds an unfinished application’s answers on this device only, until the application is submitted or a new one is started.

No analytics, advertising or session-replay technology is currently active, and no third-party marketing scripts are loaded. If a new cookie or vendor is introduced, this register will be updated before it becomes active.

Because bdoor currently uses only the strictly necessary and preference storage listed above, no consent banner is shown today. Before any analytics or marketing category is activated, a clear choice to accept, reject or customise it will be presented first; rejecting will be as easy as accepting, consent will be granular and recorded by policy version, and a persistent way to change the choice will be provided.

Browser controls may also delete or block cookies, but blocking necessary storage may prevent sign-in or form continuity.

Update this Policy and the consent record when categories or vendors materially change. Questions may be sent to hello@bdoor.io.