Cookie Policy
Effective 2026-08-27 · Last updated 2026-09-07
This Cookie Policy explains how blupdf ("blupdf", "we", "us" or "our") uses cookies and similar technologies on blupdf.com and in the blupdf application (together, the "Service"). It is part of our Privacy Policy. The short version: we set the cookies that are strictly necessary to sign you in, process payments and remember your cookie choice; Google Ads sets measurement cookies so we can tell whether our ads lead to sign-ups and purchases, with your consent where the law requires it; and our analytics are cookieless.
1. What cookies are
A cookie is a small text file that a website stores in your browser. Cookies let a site remember something between page loads - for example, that you are signed in. "Session" cookies are deleted when you close your browser; "persistent" cookies stay until they expire or you delete them. Cookies set by the site you are visiting are "first-party"; cookies set by another domain are "third-party". Similar technologies, such as local storage, work in a comparable way and are covered by this policy.
2. Essential cookies
All of the cookies in this section are strictly necessary: without them you could not sign in, stay signed in, pay, or have your cookie choice remembered.
| Cookie | Set by | Purpose | Type | Lifetime |
|---|---|---|---|---|
sb-* (for example sb-access-token, sb-refresh-token, chunked variants ending in .0, .1) | blupdf (via Supabase Auth) | Keeps you signed in after you continue with Google, and refreshes your session securely. | Essential, first-party | Session to 1 year, refreshed while you use the Service |
__stripe_mid, __stripe_sid | Stripe | Fraud prevention and security on Stripe-hosted checkout and billing pages. | Essential, third-party (Stripe) | __stripe_sid 30 minutes; __stripe_mid 1 year |
| Load-balancing cookie (only if present) | Vercel | Routes your requests consistently to the same server during a visit. | Essential, first-party | Session |
bp_consent | blupdf | Remembers whether you accepted or rejected advertising measurement cookies, so we do not ask again. | Essential, first-party | 1 year |
If you clear your cookies you will be signed out and will need to continue with Google again, and we may ask about cookies again; nothing else is lost.
3. Advertising measurement cookies (Google Ads)
We advertise blupdf on Google. To know whether an ad led to a sign-up or a purchase, our website loads Google's tag, which sets the cookies below on blupdf.com and reports two events to Google Ads: a new account, and a completed purchase with its amount. Where you have consented, the report includes a hashed form of your email address so that Google can attribute the conversion to the ad you clicked; the hash cannot be turned back into the address.
| Cookie | Set by | Purpose | Type | Lifetime |
|---|---|---|---|---|
_gcl_au | Google Ads (on blupdf.com) | Links a conversion to an earlier ad click in the same browser. | Advertising measurement, first-party | 90 days |
_gcl_aw, _gcl_gb, _gcl_gs | Google Ads (on blupdf.com) | Store the identifier of the Google ad you clicked; set only when you arrive from a Google ad. | Advertising measurement, first-party | 90 days |
bp_cv_signup | blupdf | Marks that your sign-up has been counted once, so it is never reported twice. | Advertising measurement, first-party | 1 year |
Google may also set cookies on its own domains (google.com, doubleclick.net) when the tag reports an event. How Google uses that data is described in Google's privacy policy and in How Google uses information from sites that use its services.
Your choice. If you visit from the European Economic Area, the United Kingdom or Switzerland, we ask first: a small card offers Accept and Reject, and nothing is stored until you choose. If you reject, Google's tag sets no cookies and receives no personal data from your visit. Elsewhere, the cookies are set when you visit. Wherever you are, Cookie settings in the footer of every page reopens the choice, and you can change it at any time.
4. What we do not set
- No social-media pixels or data brokers. We do not use pixels, beacons or cookies from social networks or data brokers.
- No fingerprinting. We do not attempt to identify your device by combining browser characteristics.
- Cookieless analytics. We use Vercel Analytics and Vercel Speed Insights to understand page views and page performance. Both are cookieless: they store no cookies, no identifiers in local storage, and no personal data, and they cannot follow you between sites. Measurements are aggregated.
5. Managing cookies
You can control cookies through your browser settings. Every major browser lets you view the cookies that are stored, delete some or all of them, and block cookies from specific sites or from all sites. Instructions are available from the browser makers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Safari: Preferences → Privacy → Manage Website Data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Edge: Settings → Cookies and site permissions
Please note that blocking or deleting the sb-* cookies means you cannot stay signed in to blupdf, and blocking Stripe's cookies may prevent checkout from completing. To change your choice about Google Ads cookies, use Cookie settings in the footer. The rest of the website - pricing, documentation, blog and legal pages - works without any cookies at all.
6. Changes to this policy
We may update this Cookie Policy when we change the cookies we use or when the law changes. The "Last updated" date at the top of this page shows the most recent revision. Material changes will be announced in the Service or by email.
7. Contact
Questions about cookies or about this policy: support@blupdf.com.