Cookie Policy

Last updated: 2026-09-26

This policy explains the cookies and similar browser storage BusyBee Hub uses on our website and in the app. It should be read with our Privacy Policy.

1. What cookies are

Cookies are small files a website stores in your browser. Websites can also keep information in your browser's local storage or session storage. We call all of these "cookies" in this policy.

2. Our approach

We use the cookies BusyBee Hub needs to work, such as keeping you signed in and keeping your account secure. With your permission, we also count page views with Vercel Web Analytics, which doesn't set cookies (see section 6). We don't use advertising or tracking cookies, and we don't let advertisers place cookies on our website.

UK law allows strictly necessary cookies without asking for consent, but we list every one here so you know what they do.

3. Cookies we set

sb-[project]-auth-token (in the app)

What it does: keeps you signed in and lets the app check who you are on each page. Large sessions may be split across cookies ending .0, .1 and so on.
How long it lasts: removed when you sign out. It's renewed while you use BusyBee Hub, but for your security a session can't be renewed more than an hour after you signed in, so you'll need to sign in again within two hours at most, however active you are.

sb-[project]-auth-token-code-verifier (in the app)

What it does: protects the sign-in when you use Google or Apple, by checking that the sign-in is completed in the same browser that started it.
How long it lasts: removed once sign-in completes.

bbh_invite (in the app)

What it does: remembers the team invitation you accepted while you confirm your email address, so your new account joins the right organisation.
How long it lasts: 7 days, or until your account is linked to the invitation.

bbh_consent (on our website and in the app)

What it does: remembers whether you chose "Essential only" or "Allow analytics", so we don't ask again; it's shared between busybeehub.co.uk and console.busybeehub.co.uk so you only choose once.
How long it lasts: 12 months, or until you change your choice.

4. Browser storage we use

bbh.hmrc.device_id (local storage, in the app)

What it does: a random identifier for your browser. HMRC requires software to send it, with other fraud prevention information, whenever it contacts HMRC for you.
How long it lasts: until you clear your browser storage.

finble:conversation:[organisation] (session storage, in the app)

What it does: keeps your current Finble conversation open if you close and reopen the chat.
How long it lasts: until you close the browser tab.

radar:lastAutoRefresh:[organisation] (session storage, in the app)

What it does: remembers when Radar last refreshed itself in this tab, so it doesn't refresh on every visit.
How long it lasts: cleared when you close the tab.

5. Other companies' cookies

Cloudflare Turnstile. Our sign-in, registration, password reset and contact forms use Cloudflare Turnstile to check that they're being used by a person, not a bot. Turnstile may set its own cookies or use browser storage for this. See Cloudflare's privacy policy.

Pages hosted by other companies. When you pay through Stripe, connect your bank through TrueLayer, connect to HMRC, or sign in with Google or Apple, you're taken to their own pages. Those companies may set cookies there under their own policies. We don't embed their tracking scripts on our pages.

Fonts. Our fonts are served from our own website, so loading a page doesn't contact Google or set any font-related cookies.

6. Our cookie banner

Our website and app show a banner asking you to choose "Essential only" or "Allow analytics". If you choose "Allow analytics", we load Vercel Web Analytics, which records the page address (with any private link removed), the page you came from, your approximate location, device type, operating system and browser. It doesn't set cookies, isn't used for advertising and doesn't build a profile of you; Vercel counts visits using a hash of your request that it discards after 24 hours. If you choose "Essential only", or don't choose, analytics doesn't run. You can change your choice at any time from "Cookie settings" in the website footer or Settings → Profile in the app.

7. Managing cookies

You can block or delete cookies and browser storage in your browser settings. If you block the cookies listed in section 3, you won't be able to sign in to BusyBee Hub. If you clear the HMRC device identifier, a new one is created the next time it's needed. You can change your analytics choice at any time from Cookie settings.

8. Changes and contact

We'll update this policy if the cookies we use change. The date at the top shows when it was last updated. Questions? Email support@busybeehub.co.uk.