This English text is provided for convenience only. The legally binding version is the Bulgarian one — see the Bulgarian page. In case of any discrepancy, the Bulgarian text prevails.
1. What cookies are
Cookies are small files that a website stores in your browser. Entries in the browser's local storage are similar. Without your consent we use only the strictly necessary ones — without them the site or the service you requested (sign-in, cart, payment) cannot work. Everything else is switched on only after consent in the banner, with no pre-ticked boxes.
2. What we use and what we don't
- We use no advertising or tracking cookies. We have no social media or advertising platform pixels.
- Fonts and icons are on our own server — the site makes no requests to Google. The exception is signing in with Google, if you choose it: you then go to Google's page, where Google's cookie rules apply.
- Statistics (Umami) set no cookies and leave no lasting identifiers in your browser; your IP address is not kept. They are switched on only if you allow them in the banner.
- Stripe's script is loaded only at the card payment step.
3. List
bs_consent
- Purpose
- Remembers your choice in the banner so we don't ask again
- Duration
- 180 days
- Type
- Strictly necessary
bs_lang
- Purpose
- Remembers the language you chose with the BG / EN switcher, so that we don't open the site in the other language on your next visit. Set only when you use the switcher
- Duration
- 12 months
- Type
- Strictly necessary (keeps your choice)
sb-…-auth-token (may be split into .0 and .1)
- Purpose
- Keeps you signed in to your account — only after you sign in
- Duration
- Until you sign out, at most 400 days
- Type
- Strictly necessary
sb-…-auth-token-code-verifier
- Purpose
- Temporary — when confirming an email or signing in
- Duration
- Minutes
- Type
- Strictly necessary
g_state, g_nonce, g_next
- Purpose
- Only when signing in with Google: one-time codes that protect the sign-in from tampering, and the page to return you to
- Duration
- 10 minutes
- Type
- Strictly necessary
__stripe_mid, __stripe_sid (Stripe)
- Purpose
- Fraud prevention for card payments — only at the card step
- Duration
- 1 year / 30 minutes
- Type
- Strictly necessary for the requested payment
m (on Stripe's domain)
- Purpose
- Fraud prevention for card payments — set by Stripe
- Duration
- Up to 2 years
- Type
- Strictly necessary for the requested payment
bugspeaks_cart_v1 (local storage)
- Purpose
- Keeps the products in the cart
- Duration
- Until you clear the cart or place the order
- Type
- Strictly necessary
bs_activate_code (session storage)
- Purpose
- Keeps the code of the test you are activating (“Activate your test”) while you sign in or create an account, so that it activates by itself when you come back. Only the code
- Duration
- Until you return to the page or close the tab
- Type
- Strictly necessary
bs_checkout_attempt (session storage)
- Purpose
- Prevents a duplicate order if the button is pressed again
- Duration
- Until the order or until the tab is closed
- Type
- Strictly necessary
bs_voucher (local storage)
- Purpose
- Keeps your voucher code (from the link in the email or entered at checkout) so that it fills in at checkout automatically. Only the code, without your email
- Duration
- Until the order with it or until you remove it at checkout, at most 30 days
- Type
- Strictly necessary
bs_clinic_code (local storage)
- Purpose
- Keeps the partner clinic's code (from the clinic's link or entered at checkout) so that you see the price with it and it fills in at checkout automatically. Only the code, the clinic's name and the price
- Duration
- Until the order with it or until you remove it at checkout, at most 30 days
- Type
- Strictly necessary
bs_nudge_off (local storage)
- Purpose
- Remembers that you closed Bugsy's invitation so we don't show it again — written only when you press “×”
- Duration
- 7 days
- Type
- Strictly necessary (keeps your choice)
bs_intent_off (local storage)
- Purpose
- Remembers when we last showed you the quiz invitation (“Get €20 off”) so that we don't show it more than once every 2 days. Only a date and time
- Duration
- 2 days
- Type
- Strictly necessary (so the invitation doesn't repeat)
bs_quiz_prefill (session storage)
- Purpose
- Carries your choice from the invitation (“What brings you here?”) into the quiz — deleted as soon as the quiz opens
- Duration
- Seconds — until the quiz opens
- Type
- Strictly necessary (requested by you)
bs_intent_test (session storage)
- Purpose
- Only for checks by our team (an address with “?popup=test”): shows the invitation by its real rules
- Duration
- Until the tab is closed
- Type
- Strictly necessary
bs-tracked:… (local storage)
- Purpose
- Only with consent to statistics: so that one order is not counted twice. Deleted if you withdraw your consent
- Duration
- Until you withdraw your consent or clear your browser data
- Type
- Statistics
| Name | Purpose | Duration | Type |
|---|---|---|---|
| bs_consent | Remembers your choice in the banner so we don't ask again | 180 days | Strictly necessary |
| bs_lang | Remembers the language you chose with the BG / EN switcher, so that we don't open the site in the other language on your next visit. Set only when you use the switcher | 12 months | Strictly necessary (keeps your choice) |
| sb-…-auth-token (may be split into .0 and .1) | Keeps you signed in to your account — only after you sign in | Until you sign out, at most 400 days | Strictly necessary |
| sb-…-auth-token-code-verifier | Temporary — when confirming an email or signing in | Minutes | Strictly necessary |
| g_state, g_nonce, g_next | Only when signing in with Google: one-time codes that protect the sign-in from tampering, and the page to return you to | 10 minutes | Strictly necessary |
| __stripe_mid, __stripe_sid (Stripe) | Fraud prevention for card payments — only at the card step | 1 year / 30 minutes | Strictly necessary for the requested payment |
| m (on Stripe's domain) | Fraud prevention for card payments — set by Stripe | Up to 2 years | Strictly necessary for the requested payment |
| bugspeaks_cart_v1 (local storage) | Keeps the products in the cart | Until you clear the cart or place the order | Strictly necessary |
| bs_activate_code (session storage) | Keeps the code of the test you are activating (“Activate your test”) while you sign in or create an account, so that it activates by itself when you come back. Only the code | Until you return to the page or close the tab | Strictly necessary |
| bs_checkout_attempt (session storage) | Prevents a duplicate order if the button is pressed again | Until the order or until the tab is closed | Strictly necessary |
| bs_voucher (local storage) | Keeps your voucher code (from the link in the email or entered at checkout) so that it fills in at checkout automatically. Only the code, without your email | Until the order with it or until you remove it at checkout, at most 30 days | Strictly necessary |
| bs_clinic_code (local storage) | Keeps the partner clinic's code (from the clinic's link or entered at checkout) so that you see the price with it and it fills in at checkout automatically. Only the code, the clinic's name and the price | Until the order with it or until you remove it at checkout, at most 30 days | Strictly necessary |
| bs_nudge_off (local storage) | Remembers that you closed Bugsy's invitation so we don't show it again — written only when you press “×” | 7 days | Strictly necessary (keeps your choice) |
| bs_intent_off (local storage) | Remembers when we last showed you the quiz invitation (“Get €20 off”) so that we don't show it more than once every 2 days. Only a date and time | 2 days | Strictly necessary (so the invitation doesn't repeat) |
| bs_quiz_prefill (session storage) | Carries your choice from the invitation (“What brings you here?”) into the quiz — deleted as soon as the quiz opens | Seconds — until the quiz opens | Strictly necessary (requested by you) |
| bs_intent_test (session storage) | Only for checks by our team (an address with “?popup=test”): shows the invitation by its real rules | Until the tab is closed | Strictly necessary |
| bs-tracked:… (local storage) | Only with consent to statistics: so that one order is not counted twice. Deleted if you withdraw your consent | Until you withdraw your consent or clear your browser data | Statistics |
Stripe is an independent controller for the data it collects for fraud prevention — more in Stripe's privacy policy (stripe.com/privacy).
4. How you manage your consent
You choose in the banner on your first visit. You can change or withdraw your consent at any time via “Cookie settings” in the footer — as easily as you gave it. You can also delete cookies in your browser settings; the banner will then ask you again.
More about personal data — in the Privacy Policy. Supervisory authority: the Commission for Personal Data Protection (КЗЛД, www.cpdp.bg).
