Cookie Policy

Last updated: 1 April 2026 | Brightstate.ai, Scotland


What Are Cookies?

Cookies are small text files stored on your device when you visit a website. We use them to keep the site functioning correctly and to understand how it is being used — nothing more.


What We Do Not Do

  • We do not use marketing or advertising cookies
  • We do not track you across other websites
  • We do not sell data derived from cookies to any third party
  • We do not use cookies to build personal profiles

Cookies We Use

Essential Cookies

These cookies are required for the site to function. They cannot be switched off.

Cookie Purpose Duration
session_id Maintains your active session while using the platform Session (deleted on browser close)
csrf_token Protects form submissions from cross-site request forgery attacks Session
cookie_consent Remembers your cookie preferences 12 months

Analytics Cookies

We use Google Analytics to understand how visitors use our site — for example, which pages are most visited and where users drop off. This helps us improve the platform.

Cookie Purpose Duration
_ga Distinguishes unique users (anonymised) 26 months
_ga_[ID] Tracks session activity (anonymised) 26 months

IP anonymisation is enabled. Google Analytics is configured so that no full IP addresses are stored. Data is processed under a Data Processing Agreement with Google in line with UK GDPR.

To opt out of Google Analytics across all websites, use the Google Analytics Opt-Out Browser Add-on.


Your Choices

When you first visit Brightstate.ai, you will be presented with a cookie consent banner. You can:

  • Accept analytics cookies alongside essential cookies
  • Decline analytics cookies (essential cookies will still be set)

A granular consent banner with per-category controls is currently in development and will replace the current banner shortly.

You can also manage or delete cookies at any time through your browser settings. Guidance for common browsers:


Compliance

This policy is written in accordance with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). We review it whenever our cookie use changes.

Questions? Contact us at data@brightstate.ai