Last updated: March 2026
1. Introduction
This Cookie Policy explains how Reboound ("we", "us") uses cookies and similar technologies when you use our websites and services (the "Service"). It complements our Privacy Policy.
2. What are cookies and similar technologies?
Cookies are small text files placed on your device. We also use similar technologies such as **local storage** in your browser—for example, our app stores your light/dark theme preference via the theme provider (typically under a key such as "theme") so your choice persists between visits.
3. First-party cookies we use
3.1 Strictly necessary
- **bt_session** — HttpOnly session cookie. Keeps you signed in and associates requests with your account. Required for authenticated use.
- **bt_csrf** — HttpOnly cookie used with our CSRF protection so form and API requests cannot easily be forged from other sites.
These cookies are essential for security and core functionality. They are first-party (set by our domain).
4. Analytics and performance (when enabled)
Depending on configuration, we may load:
- **Vercel Analytics** — helps us understand aggregate traffic and usage patterns.
- **Vercel Speed Insights** — helps us measure and improve performance.
- **Google Analytics** — loads only when a Google Analytics measurement ID is configured for the deployment. It may use cookies or similar storage to distinguish visits and report usage statistics.
When these scripts run, the respective providers may set their own cookies or read identifiers according to their policies.
5. Third-party cookies
Third-party cookies may be set by **Google** (if Google Analytics is enabled and/or if you use Google sign-in flows that pass through Google domains) and by **Vercel** tooling as part of analytics or speed measurement. **GitHub** may set or read cookies when you use GitHub OAuth sign-in on their domain.
6. Consent and controls
We do not currently show a dedicated cookie consent banner in the product. Depending on where you live, law may require consent or opt-out rights for certain non-essential technologies. We may update our practices (including adding consent or preference tools) to meet those requirements.
You can control cookies and site data through your browser settings—such as blocking third-party cookies, deleting stored data, or blocking all cookies. Note that blocking **bt_session** or **bt_csrf** will prevent you from staying signed in or using protected actions reliably.
7. Do Not Track
There is no consistent industry standard for "Do Not Track" signals. We treat analytics as described above regardless of DNT unless and until standards stabilize.
8. Changes
We may update this Cookie Policy. We will post the revised version and update the "Last updated" date.
9. Contact
Questions about this policy: see our Imprint page.