Skip to content
BrandMilo

Cookie Policy

How BrandMilo uses cookies and similar technologies.

Effective date
July 26, 2026
Last updated
July 26, 2026
Version
1.0
Canonical path
/legal/cookies

Overview

This Cookie Policy explains how Eazivon Technologies (Private) Limited (“Eazivon”) uses cookies and similar technologies on brandmilo.com and the BrandMilo application.

Categories

Strictly necessary

Used for authentication, session management, CSRF protection, load balancing, security, consent records, and core preferences. These cannot usually be disabled through the consent tool.

Functional

Used to remember optional preferences such as language, timezone, or interface choices.

Analytics

Used to understand aggregate usage. Enable only with required notice or consent. Analytics are off by default in the initial local launch.

Marketing

Not enabled until legal basis, consent controls, and vendor disclosures are implemented.

Cookie and similar-technology table

  • brandmilo_cookie_consent_v1 (localStorage key brandmilo_cookie_consent_v1) Provider: BrandMilo / Eazivon; purpose: store cookie preference choice; category: Necessary / preference; duration: until cleared by the user or browser; status: live
  • bm_access Provider: BrandMilo / Eazivon; purpose: short-lived session access token; category: Necessary; duration: 1 hour; HttpOnly=true; Path=/; Secure and SameSite follow the API environment; status: live for authenticated sessions
  • bm_refresh Provider: BrandMilo / Eazivon; purpose: session refresh token; category: Necessary; duration: 30 days; HttpOnly=true; Path=/; Secure and SameSite follow the API environment; status: live for authenticated sessions
  • bm_csrf Provider: BrandMilo / Eazivon; purpose: CSRF protection for cookie-authenticated requests; category: Necessary; duration: 30 days; HttpOnly=false; Path=/; Secure and SameSite follow the API environment; status: live for authenticated sessions
  • ph_*_posthog (PostHog project cookie) Provider: PostHog, Inc. PostHog Cloud; purpose: usage analytics; category: Analytics; duration: 365 days, only if analytics is enabled and the user consents; status: planned PostHog is not loaded until analytics is enabled and the user opts in

Choices

Users manage non-essential cookies through the BrandMilo Cookie Preferences control in the site footer (first-party preference UI). CookieYes (CookieYes Limited) is the designated CMP vendor and may be enabled later; it is not required for the current preference controls. Analytics remain off until you opt in. PostHog does not capture events or session replay before consent and is not loaded until analytics is enabled. Withdrawal is available from the same preferences panel. Browser settings can also block cookies. Legal pages and OAuth callback routes are excluded from unnecessary analytics.