COOKIE POLICY
Last updated: September 2026 · Version 2026-09
The short version
BidExchange (bidexchange.org) does not load any nonessential cookies until you accept them in the consent banner. Decline, and the site works normally with only what is strictly necessary to serve the page. You can change your mind whenever you like using the Cookie settings link in the footer.
Strictly necessary
These run whatever you choose, because without them the site cannot remember your decision or keep you signed in. None of them are used for analytics or advertising and none are shared.
| Name | Type | Set by | What it does | How long |
|---|---|---|---|---|
| bidex-consent | Local storage | BidExchange | Remembers whether you accepted or declined optional cookies, so we do not ask on every page. | Until you clear it or change your choice |
| sb-…-auth-token | Local storage | Supabase | Keeps a founding agency signed in between pages and visits. Required for the account area to work at all. | Until you sign out, or the session expires |
| Turnstile challenge token | Cookie / local storage | Cloudflare Turnstile | Confirms a form was submitted by a person rather than a bot. Set only when a form with the bot check is loaded. | Session, or up to 30 minutes |
Signing out removes the session token, and clearing site data for bidexchange.org in your browser removes all of them.
Analytics and advertising
None of these are running today — the accounts are not connected yet. They are listed now so this page is accurate the moment they are switched on, and they will load only after you accept in the banner.
| Name | Type | Set by | What it does | How long |
|---|---|---|---|---|
| _fbp, _fbc | Cookie | Meta (Facebook) | Measures whether an ad led to a signup, and lets us show ads to people who visited. This counts as sharing your information for advertising. | Up to 90 days |
| No cookie | — | Plausible | Counts page views and referrers in aggregate. Plausible sets no cookies and does not track anyone across sites; it is listed here for completeness. | — |
The Meta Pixel tells Meta that a visit or a signup happened, which is how we measure whether an ad worked. Because Meta can use that to target advertising, it counts as sharing your information rather than simply measuring it — which is exactly why it sits behind the banner and not in the section above.
One part of that measurement does not happen in your browser at all. If you have accepted and then sign up, our own server sends Meta a matching record of the signup, including a one way hash of your email address. That is not a cookie, so switching it off is not a browser setting — declining in the banner is what stops it, and declining means we send Meta nothing.
Changing your mind
Use the Cookie settings link in the footer of any page to reopen the banner and switch your choice either way. Withdrawing is as easy as accepting, and declining after having accepted stops the optional tools loading on your next page view. Clearing this site’s browser storage also resets the banner.
Where this fits
What we collect and why is in the Privacy Policy. If you are in the UK or the EEA, the GDPR page sets out your rights and how to use them.
Contact
Questions about cookies or browser storage: email bmiller@bidexchange.org. It reaches the founder directly.