COOKIE POLICY
Version 1.1 · 26 September 2026 · Bolutions LTD
1. Introduction
This Policy explains how Bolutions LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom (hereinafter: “Bolutions”, “we”), uses cookies and similar technologies for storing data in your browser (local storage — localStorage and sessionStorage).
We use such technologies in three places, which behave differently:
- our website bolutions.agency;
- the Platform — the inbox in which the staff of our clients manage conversations (chats.bolutions.agency);
- the chat widget that our clients place on their websites.
This Policy forms an integral part of the Privacy Policy.
2. What cookies and local storage are
A cookie is a small text file that the browser stores on your device and sends back to the website that set it. Local storage serves the same purpose — the browser stores data for a particular website — but the data are not sent automatically with every request. The same rules apply to both: anything that is not necessary for the service you have requested is set only with your consent.
3. Legal basis
Storing data in the browser is permitted with your consent, given after you have been clearly informed, and with the possibility of refusing. Consent is not required for storage that is necessary for the transmission of a communication or for the provision of a service that you have expressly requested (Article 160(4) and (5) of the Law on Electronic Communications, Official Gazette of RS, No. 35/2023; the corresponding provisions of the regulations of the United Kingdom and the EU). The Privacy Policy applies to personal data processed in this way.
4. Our website bolutions.agency
On your first visit, the website asks for your consent. Analytics tools are not switched on until you click “Accept” — until then, their default state is “denied” (Google Consent Mode v2). If you decline, the website works normally, without tracking. You can change your choice at any time via the “Cookies” link in the footer of the website.
| Name | Set by | Purpose | Duration | Category |
|---|---|---|---|---|
bol-consent (local storage) | Bolutions | Remembers your choice about cookies | 12 months | Necessary — without consent |
_ga, _ga_* | Google (Analytics 4) | Visit statistics | up to 2 years | Analytics — with consent |
The website's fonts are loaded from our server, not from third parties.
5. The Platform (inbox for clients' staff)
The Platform uses only necessary cookies and local storage, without analytics, advertising or tracking.
| Name | Purpose | Duration |
|---|---|---|
sb-…-auth-token (may be split into parts .0, .1) | Logging in and maintaining the session (Supabase) | until logout, and the cookie at most 400 days |
NEXT_LOCALE | The interface language you have chosen | 1 year |
sidebar:collapsed | Whether the side menu is collapsed | 1 year |
bolutions:lastActivity (local storage) | Time of last activity, for automatic logout after 7 days of inactivity | until you delete your browser data |
When a Facebook page or a WhatsApp number is being connected, the Platform loads, on request, the Facebook login tool, configured so that it does not set cookies.
6. The chat widget on our clients' websites
When you open the chat on the website of one of our clients, your browser starts to store some data solely so that the chat works: so that it recognises you when you return, so that you can continue the same conversation and so that the bot knows which page you are asking about. Until you open the chat, the widget writes nothing about you into the browser — except a marker that you have closed the teaser, if you close it.
| Name (local storage) | Purpose | When it is created | Duration |
|---|---|---|---|
bolutions:<client>:session, :visitor | Random visitor identifier and access key for the chat session | when you open the chat | until you delete it; the key is valid for 30 days, after which a new one is issued |
bolutions:<client>:thread | Which conversation is open, if you have more than one | when you open or start a conversation | until you delete it |
bolutions:<client>:visited | Paths and viewing times of up to the 12 most recent pages of that site, viewed after you have used the chat | when you open the chat | until you delete it |
widget settings (…:teaser-dismissed, …:sound, …:lang, …:last-product) | Whether you have closed the teaser, whether sound is on, the chosen language, the product on which you last opened the chat | when you choose that option or open the chat | until you delete them |
The widget does not set its own cookies. It loads fonts from Bolutions' servers, and product images from the client's own website — not from third parties.
Ad arrival markers. When the client's website carries the _fbc and _fbp markers (set by the client's Meta Pixel) or the fbclid parameter in the address, the widget reads them and sends them with the messages; only the record from the first message is kept with the conversation.
Measuring the client's ads. If the client uses the Meta Pixel on its website and has enabled this in the Platform, the widget additionally:
- records in temporary storage (
sessionStorage, cleared when the tab is closed) which moments it has already reported, so that it does not report them twice; - reports moments from the conversation to the client's pixel: opening the chat, the first message, contact details left, a click on call or WhatsApp and, when the bot confirms it, the placing of an order with the order amount — without the content of the conversation and without contact details.
Consent for the pixel and its cookies is collected by the client, on its own website. Cookies set by the client's website itself are governed by the client's rules and the client's cookie policy.
7. How you manage cookies and storage
- on our website — via the “Cookies” link in the footer;
- in your browser settings — you can view and delete cookies and site data, and block third-party cookies or all cookies;
- by deleting the data of the client's website in your browser, you also remove the chat widget's data; the next time, the chat starts a new conversation.
Disabling necessary cookies may prevent logging in to the Platform or continuing a conversation in the chat.
8. International transfer
Google may process data collected by analytics cookies outside the European Union as well, including in the USA, with the safeguards described in the Privacy Policy and in Google's privacy policy.
9. Changes and contact
We update this Policy when we introduce a new tool or change an existing one. The current version is always on this page, with the date at the top. Questions: office@bolutions.agency.