Cookie Policy
Last updated: 5 August 2026
1. In short
This site stores nothing on your device - no cookies, no browser storage. Analytics runs in cookieless mode, where a hash computed on EU servers replaces any identifier kept on your side. That is why you will not see a consent banner here: there is nothing to consent to. Cookies appear only once you sign in to the app at app.brosbots.com, where they are what makes the application work at all.
2. What cookies and browser storage are
A cookie is a small file a site stores in your browser and sends back with later requests. localStorage and sessionStorage work similarly - the data stays on your device, but is not sent to the server automatically. The law treats both the same way, which is why we describe them together.
3. What we use on brosbots.com
| Name | Type | What it does | How long |
|---|---|---|---|
| PostHog | No cookies, no device storage | Visit analytics: which sections you view, which buttons you click (“start free”, “call the bot”) and whether the page throws errors. It runs cookieless - instead of an identifier in your browser, PostHog computes a privacy-preserving hash on its own side. Servers in the European Union (eu.i.posthog.com). We do not record sessions on this site. | Up to 12 months (on PostHog’s side) |
| A/B test variant | In-memory only | Remembers which of the two homepage button variants you were shown, so it does not change mid-visit. Held purely in the open tab’s memory - nothing is written to disk. | Until you reload the page |
| bb_analytics_off | localStorage - record of your choice | Created only if you switch analytics off yourself in section 7. It is how we remember your objection and skip starting PostHog on later visits. If you never touch that switch, this entry does not exist. | Until you reverse the choice or clear site data |
| Vercel Web Analytics | No cookies, no device storage | Aggregate visit statistics (page views, country, referrer, CTA clicks). It does not create an identifier that would let us recognise you on a later visit. | Not applicable |
| Vercel Speed Insights | No cookies, no device storage | Page load performance measurement (Core Web Vitals), so we can spot pages that are slow. | Not applicable |
We do not store your language choice in a cookie - the Polish or English version is picked once from your browser settings (the Accept-Language header), and you can override it by going to /pl or /en directly.
4. What we use in the app (app.brosbots.com)
| Name | Type | What it does | How long |
|---|---|---|---|
| Session and sign-in cookies | Cookie - strictly necessary | Keeping you signed in and protecting forms. The app does not work without them, so they do not require consent. | Session, or until you sign out |
| PostHog (ph_*) | Cookie + localStorage - analytics | Product analytics: which app screens get used, where users get stuck, what errors they hit. Data goes to PostHog servers in the European Union (eu.posthog.com). | Up to 12 months |
| Sentry | No cookies | Application error monitoring. When something breaks, a technical report is sent (error type, browser, page URL). Sentry stores nothing in your browser. | Not applicable |
| Stripe | Cookie - necessary at checkout | Payment handling and fraud detection. Set only on Stripe checkout pages, under Stripe’s own policy. | Per Stripe’s policy |
The app’s PostHog cookie is set for the whole .brosbots.com domain, so once you are signed in it can also be visible on the marketing site. The marketing site neither creates nor uses it - its analytics is cookieless and is not joined to your account.
5. Voice demo and widget
The call widget on the homepage loads a script from BrosBots servers. Until you start a call it does not request microphone access and sends no audio. Once a demo starts we process the audio so the agent can reply - the rules are described in the privacy policy. The “call me” form sends the phone number you enter for one purpose only: to place a single demo call.
6. Legal basis
- Access to information stored on your device is governed by Articles 398-399 of the Polish Electronic Communications Law, implementing the ePrivacy Directive.
- Data required to deliver the service (session, sign-in, security, payment) is processed without consent - under Article 6(1)(b) GDPR and the strictly-necessary exemption.
- Cookie consent is required when a site stores or reads information on your device. This site does neither, so we neither ask for consent nor show a banner - we deliberately chose cookieless mode over a box to click away.
- The analytics processing itself (IP address, browser type, pages visited) rests on legitimate interest (Article 6(1)(f) GDPR), namely improving the site. It serves neither advertising nor profiling, and section 7 lets you switch it off.
- In the signed-in app, cookies strictly necessary to deliver the service are used without consent, while product analytics and session recordings are covered by the terms and privacy policy that bind signed-in users.
7. How to control this
You do not need to switch analytics off to avoid cookies - there are none. If you would rather not be counted anyway, switch it off here. Only that click writes a single entry to your browser (bb_analytics_off), so we remember your decision on later visits:
- Your browser settings let you block or delete cookies and site data - in Chrome, Firefox, Safari and Edge this sits under privacy settings.
- Blocking cookies will not affect browsing brosbots.com, but it will make signing in to the app impossible.
- Private browsing clears everything above when you close the window - including the record of your objection, so analytics will be back on your next visit.
- To have analytics data collected in the app deleted, write to kontakt@brosbots.com - we handle it as a GDPR request.
8. What we do not do
- We embed no advertising pixels or ad-network tags (Google Ads, Meta, LinkedIn).
- We do not combine your visit data with data from third-party brokers, and we do not sell data.
- We do not profile visitors for advertising, nor make automated decisions about them with legal effect.
9. Changes and contact
We update this policy whenever the set of technologies we use changes; the date of the last change is at the top of this page. Questions about cookies and personal data: kontakt@brosbots.com. Full processing rules are set out in the privacy policy.