Beachmates Cookie Policy

This Cookie Policy explains how Beachmates (Celsior Interactive Ltd, Cyprus) uses cookies and similar technologies (local storage, device identifiers) on its website and app. It should be read together with our Privacy Policy.

1. What Are Cookies and Local Storage

Cookies and local storage are small pieces of data stored on your device that let a service remember information about your visit, such as keeping you signed in, remembering your settings, or measuring how the Service is used.

2. Categories We Use

• Strictly necessary (no consent required): the session and authentication tokens set by Supabase Auth to keep you signed in and secure your session, plus security and delivery technologies from Cloudflare. The Service cannot function without these, so they are always active.
• Functional / preferences (no consent required): a language cookie (`bm_locale`, kept for up to 12 months) that remembers the display language you select yourself with the language switcher, so the Service opens in that language on your next visit; plus small values we keep in your browser's local storage to remember interface choices you make, such as whether a panel or the results ticker is expanded or collapsed, and whether you dismissed a one-off prompt. When you are signed in, your language choice is also saved to your account so the emails we send you use the same language. These are limited to running the interface as you left it, and are never used to profile you or to track you across other websites.
• Analytics (consent required): we use PostHog, hosted in the European Union, to understand how the Service is used and improve it. PostHog sets cookies and local storage entries only after you opt in through our consent banner. If you do not consent, no analytics technologies are set. With the same consent, we also keep one first-party entry in your browser's local storage (`bm-acq-ref`) that records which link or campaign first brought you to Beachmates, so that we can count how many people sign up per channel: it holds a short channel label and a date, no identifier, it is never shared with a third party, and it is removed once your account is created or if you withdraw your consent. Your consent choice itself is stored in your browser's local storage so we can remember it.
• Advertising: none at launch. If advertising technologies are introduced later, any advertising cookies will be set only with your consent, managed through the consent banner.

3. Third Parties

Some technologies are set by our providers to deliver the Service: Supabase (authentication and session), Cloudflare (hosting, delivery and security), and, with your consent, PostHog (analytics, hosted in the EU). Our map feature loads map tiles from a mapping provider, and, when you make a purchase, our payment providers handle card data on their own payment pages. These providers process data under their own terms and our agreements with them.

4. Managing Your Choices

You can accept or decline analytics through the consent banner shown on your first visit, and you can change your choice at any time in Account, then Privacy. You can also control or clear cookies and local storage through your browser settings. Blocking strictly necessary technologies may break core features such as staying signed in.

5. Consent

In the EU and EEA, we set non-essential technologies (analytics) only after you opt in, and you can withdraw your consent at any time from Account, then Privacy. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Strictly necessary and functional technologies do not require consent because they are needed to provide the Service.

6. Changes

We may update this Policy and will update the date shown above.

7. Contact

hello@celsior-interactive.com · Celsior Interactive Ltd, Onisiforou Center, Floor 2, Neofytou Nikolaidi & Theodorou Kolokotroni, Agios Theodoros, 8011 Paphos, Cyprus.