Brix Signage — Cookie Notice

1) What this notice covers

"Cookies" is the usual shorthand, but the rules cover anything stored on or read from your device. That includes cookies, localStorage, sessionStorage, and similar technologies. Everything listed below is covered, whether or not it is technically a cookie.

2) What we store, and why

Strictly necessary — always on

These are needed for the site to work. They cannot be switched off, and they do not require your consent.

• Your cookie choice (brix_cookie_consent_v1, localStorage) — remembers whether you accepted or declined, so we do not ask again on every page. Kept until you clear it.
• Sign-in session (brix_session, cookie) — only set if you sign in to the console. Kept for the length of your session.

Analytics and advertising — only after you accept

Nothing here loads or writes anything until you accept. Until then Google's tag runs in "consent denied" mode, which sends no identifiers and writes no cookies.

• Google Analytics 4 (_ga, _ga_*) — how many people visit, which pages they read, which link brought them. Up to 2 years.
• Google Ads (_gcl_*) — tells us which advert led to a trial, so we do not keep paying for ones that do not. Up to 90 days.
• LinkedIn Insight (li_*, bcookie, lidc) — the same measurement for our LinkedIn campaigns. Up to 6 months, set by LinkedIn.

Session recording — only after you accept

This one is worth describing properly, because "analytics" undersells it.

If you accept, we record how the page behaved while you used it: what was on screen, where you moved and clicked, what you scrolled past, and any errors the page threw. Played back, it looks like a screen recording of your visit. We use it to find the places where our own site is confusing or broken — the questions a pageview count cannot answer.

• What is recorded: the page as displayed, your pointer and scroll movement, clicks, and page errors.
• What is never recorded: anything you type into a field. Every input is masked at the point of capture, before anything leaves your browser — so passwords, card numbers and message text cannot be in a recording even by accident. Web addresses are recorded without their query strings.
• Where it goes: our own storage on Cloudflare. The recorder is our own software, served from our own domain. No third party receives it and no advertising network sees it.
• How long we keep it: 30 days, then it is deleted automatically.
• What is stored on your device: a random recording reference in sessionStorage (brix.replay.v1), so a page refresh does not split one visit into two. It is cleared when you close the tab.

If you fill in one of our forms after accepting, we label that recording with the email address you gave, so our team can find it when they reply to you.

Recording stops immediately if you decline or withdraw consent. Recordings already made are deleted at the 30-day mark, or sooner if you ask us — see section 6.

3) Global Privacy Control

If your browser or an extension sends a Global Privacy Control (GPC) signal, we treat it as a refusal and load nothing beyond the essentials. GPC takes priority over a previously stored acceptance: if you accepted once and later turned GPC on, the later signal wins. We honour Do Not Track the same way.

4) Changing your mind

Use the Cookie settings link in the footer of any page. Declining stops analytics and advertising tags from writing anything further and stops any recording in progress. You can also clear cookies and site data in your browser, which resets the choice and means we will ask again.

5) The Brix console

When you are signed in to the Brix console at cms.brixsignage.com, the only cookie we set is brix_session, which keeps you signed in. It is strictly necessary and carries no advertising or analytics identifier. The console serves no third-party tags at all — its security policy blocks them.

We record console sessions in the same way described in section 2, for the same reason: to find where our software is confusing or broken. The same masking applies — nothing you type is captured — and the same 30-day deletion applies. Workspaces on our sealed-screen setting are never recorded. If you administer a workspace and would rather we did not record it, email hello@brixsignage.com and we will switch it off for your account.

6) Your rights, and how to reach us

You can ask us what we hold about you, ask for it to be corrected, or ask us to delete it — including a specific session recording. Email hello@brixsignage.com. We can delete a recording the same day rather than waiting for the 30-day clock.

Our full Privacy Policy explains the legal bases we rely on, how long we keep other kinds of data, and your rights in more detail.