Cookie policy

BearScan sets only first-party cookies, and only the ones below. There are no third-party analytics, advertising or tracking cookies, and no tracking pixels. Most cookies here are needed for something you asked for. The one an ad click sets is read only to honour that ad and count its result, and bs_src is our own first-party count of which channels bring customers; nothing works differently if you block it.

Cookies we set

• Session cookies (__Secure-better-auth.session_token and related __Secure-better-auth cookies). Keep you signed in after you use an email link, Google or GitHub. Last until you sign out or the session expires. Strictly necessary.
• Sign-in state (__Secure-better-auth.state). Protects a Google or GitHub sign-in against forgery while it’s in progress. Lasts 5 minutes. Strictly necessary.
• bs_promo. Set only when you arrive from our ad in ChatGPT (its link is tagged utm_source=chatgpt). Holds the ad’s campaign tags and, when ChatGPT adds one, its click reference, nothing about you, so we can give you the free report the ad offers. We also send that click reference to OpenAI when you start a scan, sign up, claim the report or pay, so the ad’s results can be counted; see the privacy policy. Lasts 30 days.
• bs_device. A random number set on your first visit, so the free report from our ChatGPT ad can be claimed once per browser rather than once per new account. It holds nothing about you, scripts can’t read it, and we store only a scrambled (keyed hash) form of it, never shared with anyone. Strictly necessary to stop the offer being abused. Lasts a year.
• bs_src. Set on your first visit. Holds where you came from: a channel such as search or social, the referring site’s domain (not the full address), the campaign tags on the link and the page you landed on. Nothing about you. We attach it to your first scan, sign-up and purchase to count which channels bring customers, and share it with no one. Scripts can’t read it. Lasts 30 days.

Turning them off

You can block or delete cookies in your browser’s settings. Without the session cookies you can still run a free scan, but you can’t sign in.

Questions: hello@bearscan.app. See also our privacy policy.