Who we are
This policy covers the websites blinkfix.me (including app.blinkfix.me) and enterprise.blinkfix.me, run by BlinkFix Ltd, a company registered in England and Wales (company no. 13505930), registered office 27 Old Gloucester Street, London WC1N 3AX, United Kingdom. Contact: [email protected].
It explains the cookies and similar technologies (browser storage) we use, as required by the UK Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive. How we use personal data in general is explained in our Privacy Policy.
What cookies are
Cookies are small text files a website stores in your browser. "Similar technologies" include local storage and session storage, which let a website keep small pieces of data on your device. The law allows a website to use them without consent only when they are strictly necessary to provide a service you have asked for. Anything else needs your consent first.
Why there is no cookie banner
We have checked the code of both websites. They only set cookies and storage that are strictly necessary for things you ask for: signing in and staying signed in, remembering a language, currency or display setting you chose, and letting our payment provider Stripe prevent fraud when you pay. We do not use:
- advertising or retargeting cookies;
- analytics or statistics cookies (no Google Analytics, no tag managers, no heatmaps);
- social-media plugins or "like" buttons;
- third-party fonts loaded from other servers (our fonts are served from our own servers).
Because every cookie we use is exempt from the consent requirement, we do not show a cookie banner. If that changes, we will ask for your consent before setting any non-essential cookie, and you will be able to refuse it as easily as accept it.
Cookies on blinkfix.me
| Name | Set by | Purpose | Type | Lasts |
|---|
bfx_at, bfx_rt | BlinkFix | Keep you signed in (access and refresh token). Secure, http-only: scripts on the page cannot read them. | Strictly necessary | 30 days |
bfx_panel, bfx_held_at, bfx_held_rt | BlinkFix | The Establishment Panel on a shared tablet at an establishment: which staff member is signed in, and the manager's session kept aside meanwhile. Secure, http-only. | Strictly necessary | Up to 16 hours |
bfx-lang | BlinkFix | The language you picked (English or Polish). | Strictly necessary (remembers your choice) | 1 year |
bfx-cur | BlinkFix | The display currency you picked for prices. | Strictly necessary (remembers your choice) | 1 year |
__stripe_mid, __stripe_sid | Stripe | Set only on payment pages, when Stripe's payment form loads, to detect and prevent card fraud. See Stripe's cookie policy. | Strictly necessary (fraud prevention for a payment you make) | 1 year / 30 minutes |
Cookies on enterprise.blinkfix.me
| Name | Set by | Purpose | Type | Lasts |
|---|
bfx_ent_at, bfx_ent_rt | BlinkFix | Keep you signed in to BlinkFix Enterprise. Secure, http-only. | Strictly necessary | 30 days |
bfx_shell | BlinkFix | Whether you chose the new or the classic layout. | Strictly necessary (remembers your choice) | 1 year |
bfx-lang | BlinkFix | The language you picked. | Strictly necessary (remembers your choice) | 400 days |
__stripe_mid, __stripe_sid | Stripe | Only when an admin pays by card (AI credits, bonuses), to prevent card fraud. | Strictly necessary | 1 year / 30 minutes |
Browser storage
Both websites keep a few settings and working data in your browser's local or session storage. This data stays on your device; we do not read it from our servers unless it is part of a request you make. Examples:
- your look and feel (skin, light or dark mode), and whether you already confirmed a language or currency;
- items in your basket and small notices you dismissed (for example the email-verification banner);
- recent place and address searches, and the shop layout you picked;
- the AI assistant conversation in the current tab (session storage, deleted when you close the tab);
- on enterprise.blinkfix.me, a record that you agreed to the AI assistant, as a back-up to the record on our servers.
You can clear this storage at any time in your browser settings. The websites still work, but will forget your settings.
Other things your browser loads
- Maps. Map tiles on blinkfix.me come from OpenStreetMap (tile.openstreetmap.org) and on enterprise.blinkfix.me from OpenFreeMap (tiles.openfreemap.org). Your browser sends these servers your IP address to download the map images. They do not set cookies for us.
- Stripe.js is loaded from Stripe's servers only on pages where you pay.
The BlinkFix apps
The BlinkFix and BlinkFix Enterprise apps for iPhone and Android do not use cookies. They keep your sign-in in the secure storage of your device (the iOS Keychain or the Android Keystore) and contain no advertising or analytics SDKs. Push notifications use Firebase Cloud Messaging, Apple Push Notification service and, for the Enterprise app, Expo; see the Privacy Policy.
How to control cookies
You can block or delete cookies in your browser settings. If you block the strictly necessary cookies, you will not be able to sign in or pay, and your language and currency will not be remembered.
Changes
We will update this policy if the cookies we use change. The version date at the top shows when it last changed.