Cookie Policy
The short version: we set two cookies to sign you in and keep you safe, remember a couple of preferences in your browser, and count visits only if you say yes.
Last updated: 18 August 2026
1. What we mean by cookies
A cookie is a small file a site stores in your browser and sends back on later requests. Browsers also offer local storage, which keeps data on your device but never sends it anywhere. We use both, and this page covers both — the law treats them the same way, so calling one a cookie and the other something else would only muddy things.
2. What we set
| Name | Category | What it does | Lasts |
|---|---|---|---|
| br_sessionid | Strictly necessary | Keeps you signed in. Set only after you log in. | 2 weeks |
| br_csrftoken | Strictly necessary | Security token that stops another site from submitting forms as you (CSRF protection). | 1 year |
| br-cookie-consent | Strictly necessary | Remembers your choice on this page, so we don't ask again on every visit. Local storage, not a cookie. | Until you clear it |
| br-theme | Preferences | Remembers light or dark mode. Local storage, not a cookie. Set only if you change the theme. | Until you clear it |
| umami.cache | Analytics | Used by our self-hosted Umami analytics to count visits. Set only if you allow analytics. | Session |
All of these are first party — set by brandreco.com itself. We run our own analytics on our own infrastructure rather than embedding a third-party tracker, so no advertising network receives anything about your visit.
3. The categories, and what you can turn off
Strictly necessary. Sign-in and CSRF protection. Without these you cannot log in, and forms would be open to abuse, so they are set without asking and cannot be switched off. The consent record itself lives here too — we have to remember your answer in order to respect it.
Preferences. Light or dark mode. Stored only once you change the theme, and only in your browser.
Analytics. Page views and referrers, through our self-hosted Umami. Off until you allow it. When you are signed in, Umami is told your email address so we can tell repeat use from new sign-ups — declining analytics stops that too.
4. How we ask, and for how long it counts
Nothing optional is stored before you agree. Analytics stays off until you say yes, and refusing takes exactly one click, on a button no harder to find than the one that accepts — a banner that made refusing the fiddlier option wouldn't be asking, it would be nudging.
A decision is remembered for 12 months. After that we ask again rather than assume the answer still holds. Withdrawing is as easy as giving: one switch on the settings page, effective immediately.
5. Changing your mind
Your choice is stored in your browser, on this device, and applies until it expires or you clear it. Change it whenever you like on the Cookie Settings page — turning analytics off takes effect immediately and stops the script loading on your next page view.
You can also clear or block storage in your browser settings. Blocking everything will sign you out and keep you from signing back in, since the session cookie is what keeps you logged in.
6. More detail
- The Privacy Policy explains what personal data sits behind these, how long we keep it, and the rights you have over it.
- The AI Policy covers what is sent to AI providers — a separate question from anything stored in your browser.
- Questions we haven't answered here: contact@brandreco.com.