Cookie Policy
How we use cookies
Cookies and similar storage (such as your browser's local storage) hold small pieces of data on your device. We use essential ones to run DocAI. We use optional ones only after you allow them in the cookie notice, and you can change that choice at any time with "Cookie settings" in the footer of every page.
We set no advertising cookies and use no cross-site tracking. Plausible and Cloudflare Web Analytics are cookieless, Google Analytics 4 sets two cookies, and all three wait for your consent.
Categories
- Essential: needed for the site to work, to keep you signed in, to remember your choices and to protect against abuse. Always on.
- Analytics (optional): counts page views so we know which pages are useful. Off until you allow it.
- Marketing (optional): records a partner referral when you arrive from a partner link. Off until you allow it.
Every cookie and storage item
| Name | Category | Where | Purpose | Duration |
|---|---|---|---|---|
| bl_consent | Essential | Cookie, all *.bizlegal-ai.com sites | Remembers your cookie choice and the policy version you saw | 180 days |
| al-theme | Essential (a preference you chose) | Browser local storage, every site | Remembers the Counsel (light) or Vault (dark) theme you picked | Until cleared |
| bl-sticky-lead-dismissed-until | Essential (a preference you chose) | Browser local storage | Remembers that you closed a promotional badge | Until the stored date |
| al-notice-ofac-2026-09 | Essential (a preference you chose) | Browser local storage, bizlegal-ai.com | Remembers that you closed an announcement | Until cleared |
| ux-newsletter-last:<form> | Essential | Browser session storage, sites with an email sign-up form | Holds the email address you just submitted, so the same form is not sent twice | Until you close the tab |
| ops_session | Essential | Cookie, bizlegal-ai.com | Keeps the operator dashboard signed in (staff only) | 12 hours |
| sb-<project>-auth-token | Essential | Cookie, DocAI, TRACR and LexAudit | Keeps you signed in (Supabase) | Until you sign out or the session expires |
| docai_auth_next | Essential | Cookie, DocAI | Returns you to the page you wanted after sign-in | 60 minutes |
| tracr_login_next | Essential | Cookie, TRACR | Returns you to the page you wanted after sign-in | 30 minutes |
| bx_access | Essential | Cookie, BrainX | Proves your paid radar access | 30 days |
| cp_session | Essential | Cookie, CasePage | Keeps you signed in | 30 days |
| sf_session | Essential | Cookie, SinceFiled | Keeps you signed in | 30 days |
| prr:<report> | Essential | Browser local storage, the hub Practice Revenue tool | Keeps the key to a report you generated, on your device only | Until cleared |
| bizlegal-hub-slip-v1 | Essential (a preference you chose) | Browser local storage, bizlegal-ai.com/scroll | Remembers the products you shortlisted on that page | Until cleared |
| dd_email | Essential | Browser local storage, LeaseParse dashboard | Remembers the email you use in the dashboard, on your device only | Until cleared |
| __cf_bm, cf_clearance | Essential | Cookie set by Cloudflare | Bot protection and security challenges | 30 minutes to 1 year |
| Cloudflare Turnstile | Essential | Script from challenges.cloudflare.com on some forms | Checks that a form is sent by a person, not a bot | See Cloudflare's policy |
| Plausible Analytics | Analytics (optional) | Script from plausible.io; sets no cookie | Counts page views without identifying you | No storage on your device |
| Cloudflare Web Analytics | Analytics (optional) | Script from static.cloudflareinsights.com; sets no cookie | Counts page views and measures page speed without identifying you | No storage on your device |
| _ga, _ga_SEERMBYM93 | Analytics (optional) | Cookies set by Google Analytics 4 (Google) on the BizLegal AI hub and FirmCited, after you allow analytics | Counts visits and pages. Google signals and ad personalisation are switched off, and it is not loaded when your browser sends Do Not Track or Global Privacy Control | Up to 2 years |
| biz_utm | Essential | Browser sessionStorage (not a cookie), hub and FirmCited | Remembers the campaign tags of the link you arrived on, and sends them only if you submit an email sign-up form | Until you close the tab |
| bz_aff | Marketing (optional) | Cookie, bizlegal-ai.com | Records the partner who referred you, so the partner can be credited | 90 days |
| PayPal / NOWPayments cookies | Set by the payment provider | On the provider's own site during checkout | Payment security and fraud prevention | See the provider's policy |
Your consent record
When you choose, we store the choice in the bl_consent cookie and log it on our server with the time, the policy version and a random identifier that does not identify you, so we can show what was agreed. Contact [email protected] for a copy.
Managing cookies in your browser
You can also delete or block cookies in your browser settings. Blocking essential cookies may stop sign-in or checkout from working.
Changes
When this list changes in a way that needs new consent, the policy version changes and the cookie notice asks you again. Effective date: 2 October 2026.