Last updated: July 23, 2026
Policy version: 2026-07-23.5
1. What are cookies?
Cookies are small text files stored on your device. We also use similar technologies such as local storage and session storage where noted below.
2. How we use cookies and similar technologies
We group identifiers into three consent categories: necessary, which is always active; analytics, controlled by cookie_consent; and Google Maps, controlled separately by google_maps_consent. For anonymous decisions, a random bv_consent_id links your preferences to our consent audit record. Authenticated decisions may also be linked to the logged-in account while it exists; hard deletion of the account removes that link. All preference cookies listed below last 12 months.
2.1 Strictly necessary
These are required for the site to function. They do not require consent under EU ePrivacy rules.
| Name | Type | Purpose | Provider | Retention |
|---|---|---|---|---|
| sessionid | Cookie | Maintains your authenticated session | BichoVets | Browser session, or up to 2 weeks if “Remember me” is selected at login |
| csrftoken | Cookie | Protects against cross-site request forgery (CSRF) | BichoVets | Up to 1 year |
| django_language | Cookie | Remembers your selected site language | BichoVets | Up to 1 year |
Authentication flows may set additional session cookies while you sign in or verify your email.
Your consent choice applies immediately. If its audit confirmation fails, the pending confirmation is temporarily queued in necessary first-party localStorage and retried; the queue does not enable analytics or Google Maps.
Cookie security attributes
On HTTPS connections, session and CSRF cookies are transmitted only over encrypted connections. The session cookie is not accessible to JavaScript (HttpOnly). Cookies use SameSite=Lax unless your browser applies stricter defaults.
2.2 Preference cookies
These remember your optional consent choices. Setting them does not enable analytics or Google Maps by itself.
| Name | Type | Provider | Purpose | Retention |
|---|---|---|---|---|
| cookie_consent | Cookie | BichoVets | Remembers whether you accepted or rejected analytics tracking | 12 months |
| google_maps_consent | Cookie | BichoVets | Remembers whether you accepted or rejected Google Maps scripts | 12 months |
| bv_consent_id | Cookie | BichoVets | Random audit identifier that links the preference choice to the consent record without placing the record itself in the cookie | 12 months |
Each submitted decision has a unique event UUID so retries are idempotent. We keep the exact policy documents and consent-interface copy presented for the applicable version, with SHA-256 integrity hashes, as evidence. Consent decision records are retained for 730 days (approximately 24 months) from each decision and then purged.
Consent-audit data is not sent to our analytics system or third-party monitoring. Monitoring uses aggregate operational signals without consent identifiers or user identifiers.
2.3 Analytics (consent required)
With your consent through cookie_consent, we use self-hosted, first-party analytics to measure how our listings are used, including listing views, searches, contact clicks, social link clicks, and store map interactions. Analytics data is not transferred to a third-party analytics provider. If you reject analytics, no analytics session identifier is created and no interaction events are collected.
| Name | Type | Provider | Purpose | Retention |
|---|---|---|---|---|
| bv_analytics_session | Local storage | BichoVets | Random session identifier grouping events from one visit; created only after you accept analytics. Rotates after 30 minutes of inactivity. | Until cleared or rotated |
Self-hosted measurement scripts load only after analytics consent and do not set an additional third-party analytics cookie on our domain. Analytics data is retained for a maximum of 30 days.
To withdraw analytics consent, open Cookie preferences and reject analytics, or delete the cookie_consent cookie and bv_analytics_session from your browser storage.
2.4 Google Maps (consent required)
Interactive maps, address autocomplete, and related Google Maps Platform features load only after you consent through google_maps_consent. Without consent, the interactive map is unavailable, but the rest of the site and its non-map content remain accessible. This is not a cookie wall.
| Name | Provider | Purpose | Retention |
|---|---|---|---|
| Google Maps cookies and similar technologies | Deliver interactive maps, address autocomplete, security, and related Google Maps Platform functions after consent | Set and controlled by Google; names and lifetimes may change. Consult Google’s current cookie documentation rather than relying on an exact identifier or guaranteed retention period. |
When you consent, pages request resources from Google’s domains. Google receives your IP address and browser information and may set or read cookies or similar technologies on its domains. Google acts as an independent controller for that processing. Our use is subject to applicable contractual data protection terms, including a data processing agreement where Google acts as a processor. See the Google Privacy Policy, Google cookie information, and Google Maps terms.
Google Fonts may still load on some pages as part of display styling. Maps scripts and Google Maps cookies are not loaded for map features until you consent.
To withdraw Google Maps consent, open Cookie preferences and reject Google Maps. The interactive map is removed without requiring a page reload. Google controls any cookies it previously set, which you can remove through your browser settings.
2.5 Functional session storage (maps)
The Explore page and homepage location features may store the last resolved location object in your browser’s sessionStorage (not a cookie) so nearby results load faster within the same tab. GPS is used only after browser-native permission, which you can revoke in browser settings. Approximate city and coordinates are resolved through an in-memory or local server database lookup, with no named external geolocation vendor and no persistent server-side location storage.
| Name | Type | Provider | Purpose | Retention |
|---|---|---|---|---|
| bv_user_location | Session storage | BichoVets | Stores the location object fields lat, lng, method, city, and timestamp for precise GPS or approximate IP-based location within the current tab. | Until tab closes; GPS entries expire after 15 minutes, approximate entries after 1 hour |
This storage is used for location functionality only. Precise GPS processing relies on consent under GDPR Art. 6(1)(a); approximate city processing relies on legitimate interests under GDPR Art. 6(1)(f). It is not used for analytics or advertising.
2.6 Advertising
We do not use third-party advertising or remarketing cookies.
3. Managing cookies
Use Cookie preferences in the site footer (or management footer where available) to change optional choices at any time. You can also block or delete cookies in your browser settings. Blocking strictly necessary cookies may prevent login or forms from working. Blocking or clearing analytics or Google Maps identifiers stops those features even if you previously accepted.
Most browsers let you view, manage, and delete cookies from their settings. See the instructions for Google Chrome, Mozilla Firefox, Apple Safari, and Microsoft Edge.
4. Contact
Questions about cookies: Contact page. See also our Privacy Policy.
5. Changes and legal review
We will provide reasonable notice of material updates. This policy should be reviewed by qualified legal counsel before publication and after material changes to the service or applicable law.