Only the essentials.

This version sets no advertising or optional analytics cookies. A consent banner is not used to pretend there is a choice about essential sign-in security. If optional tracking is added later, we will assess applicable PECR rules and obtain consent before setting cookies where required, with an equally accessible refusal.

Security sessions

__Host-bramlo_admin keeps an administrator signed in for up to eight hours. __Host-bramlo_customer keeps a customer signed in to their own project for up to eight hours. Both are Secure, HttpOnly and SameSite=Strict. They are restricted to this website. Sign-out removes the browser cookie. Customer access can also be revoked by Bramlo.

Payments and infrastructure

Stripe Checkout and billing management open on Stripe’s hosted pages and use their own security technology. Cloudflare may use necessary security cookies depending on the deployed security settings; verify the deployed inventory before launch. We do not embed Stripe.js, advertising pixels or third-party analytics here.

Control

You can remove cookies in your browser; removing a sign-in cookie signs you out. See the privacy notice for contact and data rights.