Cookie Policy

1. What We Use Today

The current website uses browser storage for:

• Coach Card state: saves your local Coach Card display after signup.
• Cookie preferences: remembers whether you allowed optional analytics or marketing measurement.
• Brain Lab after explicit launch: the browser or delivery network may cache immutable Unity build files, and Unity may store local scene save files in browser-managed IndexedDB storage.
• Campaign attribution: stores limited UTM, referral, and click-id data only after optional consent.
• Security and operation: server-side rate limiting and hashed technical data.

2. Essential Storage

Essential storage is required for the website to work properly. It supports secure Google identity verification for the waitlist and Brain Lab access gate, the Coach Card experience, saved preferences, security, and basic site operation. If you explicitly launch Brain Lab, its build cache and local scene files support loading and local persistence; they are not linked to your Google account. Essential storage cannot be disabled through the website controls, but Brain Lab downloads nothing until you launch it.

3. Optional Analytics And Marketing Measurement

After you enable optional Analytics, the site may load Google Analytics 4 to measure page views, events, conversions, and device categories such as mobile, desktop, and tablet. GA4 may use the _ga and _ga_* cookies and pseudonymous identifiers; BAIS does not send waitlist email, display name, Google subject, Coach number, or free-text form answers to GA4. BAIS does not sell personal data.

Optional marketing measurement may help us understand which teaser, trailer, ad, creator, or Coach Card share brought a visitor to the website. It remains a separate choice and is not enabled merely by enabling Analytics.

4. Current Storage Keys

• bais_founding_auth - essential HttpOnly Google sign-in session cookie required for the waitlist and shared by optional Founding Crew and Contributor account flows. It expires after no more than 12 hours, can be revoked by signing out, and is not available to page scripts.
• bais_founding_oauth_flow_<statehash> - essential 10-minute HttpOnly cookie used only for browser-bound OAuth state while validating the active Google sign-in return. It is not available to page scripts.
• bais_crew_session - essential HttpOnly Crew access session cookie created only after a member signs in. It normally expires after no more than 12 hours. If the member explicitly selects “Remember me for 30 days,” it expires after no more than 30 days; BAIS persists only a hash of the random session token. It can be revoked by signing out, rotating the Crew Key, or requesting deletion and is not available to page scripts.
• bais_crew_remember_30d - transient sessionStorage preference used only to carry the explicit 30-day choice through the same-tab Google redirect. It is cleared when Crew access opens.
• bais_waitlist_referral_oauth_v2 - transient sessionStorage context containing only the Coach number, flow, phase, and creation time. It carries the functional referral through the same-tab Google redirect and language navigation, remains valid for 10 minutes without extending on retries, and is removed after successful registration or the next read after expiry.
• bais_coach_reward_v1 - local Coach Card state.
• bais_cookie_preferences_v2 - analytics and marketing measurement preference.
• bais_cookie_preferences_v1 - older preference key read only for migration.
• bais_attribution_v1 - campaign and referral attribution after optional consent.
• bais_client_id_v1 - random browser analytics ID after optional consent.
• bais_session_id_v1 - random session analytics ID after optional consent.

5. Manage Your Choice

You can update your preference at any time. Rejecting optional analytics will not prevent you from using the waitlist.

6. Browser Controls

You can also delete cookies, cache, IndexedDB data, or other browser storage through your browser's site-data settings. Deleting the session cookie signs you out, deleting local storage may remove the locally saved Coach Card display, and deleting Brain Lab site data may remove cached build files and local scene saves. Signing in again with the same Google identity lets the server return the same waitlist reservation, but it does not restore deleted Brain Lab scene saves.