Cookie Notice
This notice lists every cookie and every piece of browser storage Behavly uses. There are two very different situations: our own website and application, and the tracking snippet our customers install on their sites.
Last updated 6 September 2026
2.On our own site and application
We use only cookies that are strictly necessary to sign you in and to keep the application working. We do not use analytics, advertising or social-media cookies, and no third party sets cookies on our site. Because none of these cookies is optional, we do not show a cookie banner.
| Cookie | Purpose | Lifetime |
|---|---|---|
| sb-…-auth-token | Keeps you signed in. Set by our authentication provider (Supabase) after you log in. May be split across several numbered cookies. | Session, refreshed while you use the application |
| active_team_id | Remembers which Workspace you are working in when you belong to more than one. | 1 year |
| bv_terms | Carries your acceptance of the Terms from the sign-up page through the Google or Microsoft sign-in round trip, so it can be recorded on your new account. | 10 minutes, removed after sign-up completes |
The application may also keep interface preferences, such as whether a panel is open, in your browser’s local storage. These never leave your browser and hold no personal data.
3.The Behavly snippet on customers’ websites
When a customer installs the Snippet on its own website or product, the Snippet records how that customer’s logged-in users behave. The customer is the controller of that data and is responsible for the notice or consent its law requires; Behavly acts as the customer’s processor. The Snippet:
- sets no cookies. It keeps a random identifier and the link to the identified user in the site’s localStorage, and short-lived heatmap data in sessionStorage. This storage belongs to the customer’s domain, not to Behavly’s.
- stops immediately when the browser sends the Global Privacy Control or Do Not Track signal.
- offers a consent function the customer’s site can call to start or stop recording according to its own consent banner.
- ignores known bots and crawlers so that automated traffic is not recorded.
To stop the Snippet from recording you on a customer’s site, use that site’s own privacy controls, enable Global Privacy Control in your browser, or clear the site’s storage.
4.Email tracking
Emails sent through Behavly contain a one-pixel tracking image that records when the email is opened, and links that pass through Behavly to record clicks before redirecting. These are not cookies and place nothing in your browser. Every such email carries an unsubscribe link.
5.Your choices
You can block or delete cookies in your browser at any time. Blocking the sign-in cookie means you cannot stay logged in to Behavly. Details of how we process the data behind these technologies are in the Privacy Policy.
6.Changes and contact
We will update this notice whenever the cookies or storage we use change. Questions: hello@behavly.io.