Cookie Policy
The short version: BoxSafe uses only the cookies needed to keep you signed in. No advertising, no analytics, no tracking.
Last updated: 5 September 2026
We don't track you
BoxSafe contains no advertising cookies, no analytics trackers, and no social-media pixels. Because every cookie we set is strictly necessary for the service to work, UK law (PECR) does not require a cookie consent banner — there is simply nothing to opt in or out of.
Cookies we set
| Cookie | Purpose | Duration |
|---|---|---|
| sb-*-auth-token (Supabase) | Keeps you securely signed in to your BoxSafe account | Until you sign out (refreshed automatically) |
| bs_impersonating | Marks a BoxSafe support-admin session when our team assists a gym with their permission | Session |
Settings stored on your device
Some conveniences are stored in your browser's local storage. This data never leaves your device and is not sent to us or anyone else.
| Item | Purpose | Kept for |
|---|---|---|
| bs_dark_mode / bs_text_size | Your theme and text-size preferences | Until you change or clear them |
| bs_injury_draft / bs_incident_draft | Recovers an unfinished injury or incident form on this device (cleared on submit, and automatically after 24 hours) | Up to 24 hours |
| bs_checkin_dismissed / reminder flags | Remembers panels you have dismissed so they stay dismissed | Varies (per day or per event) |
You can clear cookies and local storage at any time through your browser settings — you'll just need to sign in again.
Questions?
See our Privacy Policy for how we handle your personal data, or email privacy@boxsafe.co.uk.