Cookie Policy
Last updated:
This Cookie Policy explains how Bruno uses cookies and similar storage technologies on the Bruno Marketing Site (bruno.support) and dashboard (app.bruno.support). For how the Bruno widget handles storage on customer websites, see the dedicated section below.
1. What are cookies?
Cookies are small text files stored on your device by your browser. We also use other forms of local storage like localStorage and sessionStorage. We collectively refer to all of these as "storage" in this policy.
2. Categories
We only use storage that falls into one of two categories:
- Strictly necessary - required for the Service to work (login session, CSRF token, security flags). These do not need consent under EU/UK law.
- Preferences - remember your choices (theme preference). These are first-party and minimally identifying.
We do not use third-party analytics, advertising, or behavioural tracking on either the Marketing Site or the dashboard.
3. The full list
Marketing Site (bruno.support)
| Name | Type | Category | Purpose | Lifetime |
|---|---|---|---|---|
bruno.theme | localStorage | Preferences | Remembers your light/dark theme choice. | Until you clear it |
Dashboard (app.bruno.support)
| Name | Type | Category | Purpose | Lifetime |
|---|---|---|---|---|
bruno_access | HTTP cookie | Strictly necessary | Short-lived signed access token used to authenticate dashboard requests. | ~15 minutes |
bruno_refresh | HTTP cookie | Strictly necessary | Refresh token used to renew the access token. | ~30 days |
bruno_csrf | HTTP cookie | Strictly necessary | Cross-site request forgery protection. | Session |
bruno.theme | localStorage | Preferences | Remembers your light/dark theme choice. | Until you clear it |
Widget (when installed on a customer website)
The widget runs on customer websites under the customer's responsibility. It does not set HTTP cookies. It uses localStorage on the customer's domain to maintain a per-visitor session for the chat panel:
| Name | Type | Category | Purpose | Lifetime |
|---|---|---|---|---|
bruno.session | localStorage | Strictly necessary | Session ID, conversation continuity, panel-open state, and "trust all this session" choice. | Until cleared or "Start new chat" is used |
The widget cannot read cookies or storage from other sites or other origins. The widget does not load third-party trackers.
4. How to control storage
You can clear or block cookies and local storage in your browser settings. Note that disabling strictly necessary storage will break logins on the dashboard. The theme preference will simply default to your operating system setting.
5. Changes to this policy
We may update this policy when our storage practices change. The "Last updated" date reflects the most recent change.
6. Contact
Questions? Email help@bruno.support.