Last changed: 30 September 2026.
This statement covers bioprofile.com and app.bioprofile.com. Cookies and similar storage (localStorage and sessionStorage) are small pieces of information that a website puts in your browser or reads from it. Below you can see, per category, what we use, what for, who places it and how long it stays. The list was made from our own code and a measurement of both sites on 17 September 2026, and checked again on 30 September 2026; we update it whenever something changes.
A cookie choice (cookie banner) that lets you refuse or allow the categories “use and statistics” and “marketing” is being built and is not there yet. At the moment those measurements load when you visit. Until the choice is there, you can block them through your browser settings or with a blocking programme. You need the necessary storage for the scan and your account to work.
Makes sure you can sign in, that the scan remembers where you were and that your choice of language is kept. No consent is needed for this.
| Name | Purpose, who places it and how long it stays |
|---|---|
| name to follow (cookie) | Stores the cookie choice and a random browser id, so that the choice applies on both sites and can be logged. (planned, not active yet) Placed by BioProfile. Retention period: to be determined. |
| bp.sessions.v1 (localStorage) | Keeps track of this browser’s scans as a quick view; the server stays the source. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.owner.v1 (localStorage) | Remembers which account the saved scans belong to. Set by BioProfile. Retention: until you or the site erases it. |
| bp.inprogress.v1 (localStorage) | Stores a scan that is still in progress, so it carries on after a reload. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.resume.dismissed.v1 (localStorage) | Remembers which unfinished scans someone has clicked away. Set by BioProfile. Retention: until you or the site erases it. |
| bp.scanentry.v1 (localStorage) | Remembers how the scan was started (entry point, language). Set by BioProfile. Retention: until you or the site erases it. |
| bp.scan.google.v1 (localStorage) | Holds a scan while you sign in with Google. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.login.mode.v1 (localStorage) | Remembers whether someone signs in with a link or with a password. Set by BioProfile. Retention: until you or the site erases it. |
| bp.pw.skip.v1 (localStorage) | Remembers that someone has put off the request to create a password. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.module.v1 (localStorage) | Remembers which section someone chose last. Set by BioProfile. Retention: until you or the site erases it. |
| bp.lang.v1 (localStorage) | Remembers the language you chose. Set by BioProfile. Retention: until you or the site erases it. |
| bp.lab.units.v1 (localStorage) | Remembers the units chosen for lab results. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.expert.units.v1 (localStorage) | Remembers the units an expert chose for a client’s results. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.coach.editor-hint.v1 (localStorage) | Remembers that a coach has closed the explanation in the editor. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.expert.registration.v1 (localStorage) | Holds an expert registration that is in progress. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp:plan-signal:{ref} (localStorage) | Remembers that the order signal for an order has already been reported to our server. Placed by BioProfile. Retention period: until you or the site clears it. |
| sb-{project-ref}-auth-token (localStorage) | The login session. Placed by Supabase (supabase-js 2.112.1). Retention period: until you or the site clears it. |
| bp_diag_on (localStorage) | Turns on a temporary sign-in diagnosis (only with ?diag=1). (only during a diagnosis by support, at your request) Set by BioProfile. Retention: until you or the site erases it. |
| bp_diag_log (localStorage) | The steps of that diagnosis, without address or link value. (only during a diagnosis by support, at your request) Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.home.lang (localStorage) | Remembers the language chosen on the landing page. Placed by BioProfile. Retention period: until you or the site clears it. |
| bp.steps.{key}.v1 (sessionStorage) | Answers and position in a step-by-step form (login level, expert registration). Placed by BioProfile. Retention period: until you close the tab. |
| bp.fromlink.v1 (sessionStorage) | Notes briefly that someone came in through a login link. Placed by BioProfile. Retention period: until you close the tab. |
| bp.modules.v1 (sessionStorage) | Temporary copy of the sections an account has access to. Set by BioProfile. Retention: until you close the tab. |
| bp.oauth.v1 (sessionStorage) | Holds the values you filled in while you sign in with an external service. Placed by BioProfile. Retention period: until you close the tab. |
| bp.geo.country (sessionStorage) | The country the visitor is in, for language and scan content. Placed by BioProfile. Retention period: until you close the tab. |
| bp.scanfacts.v1|{country}|{language}|{scan} (sessionStorage) | Temporary copy of the scan content per country and language. Set by BioProfile. Retention: until you close the tab. |
| bp.contentpack.v1 (sessionStorage) | Temporary copy of the texts on the page. Set by BioProfile. Retention: until you close the tab. |
| elementor (localStorage) | Page builder: display state. Set by Elementor (WordPress). Retention: until you or the site erases it. |
| elementor (sessionStorage) | Page builder: display state of the tab. Set by Elementor (WordPress). Retention: until you close the tab. |
| wpEmojiSettingsSupports (sessionStorage) | WordPress: whether the browser can show emoji. Set by WordPress. Retention: until you close the tab. |
Measures how the sites and the software are used (Google Analytics and PostHog).
| Name | Purpose, who places it and how long it stays |
|---|---|
| _ga (cookie) | Google Analytics: tells visitors apart. Placed by Google (Analytics 4). Retention period: 400 days. |
| _ga_3J4RXS7ROM (cookie) | Google Analytics: keeps track of the session. Placed by Google (Analytics 4). Retention period: 400 days. |
| ph_{project-key}_posthog (cookie) | PostHog: visitor and session id for usage analysis. Set by PostHog (EU). Retention: 365 days. |
| ph_{project-key}_posthog (localStorage) | PostHog: the same data in the browser storage. Set by PostHog (EU). Retention: until you or the site erases it. |
| ph_{project-key}_posthog (sessionStorage) | PostHog: session state of the tab. Set by PostHog (EU). Retention: until you close the tab. |
| ph_{project-key}_primary_window_exists (sessionStorage) | PostHog: marks the first window. Set by PostHog (EU). Retention: until you close the tab. |
| ph_{project-key}_session_registered_properties (sessionStorage) | PostHog: properties of the session. Set by PostHog (EU). Retention: until you close the tab. |
| ph_login_tracked (localStorage) | Tag Manager: remembers that a sign-in has already been reported to PostHog. Set by BioProfile. Retention: until you or the site erases it. |
Remembers which advert you came through, and lets Meta, Google and ActiveCampaign measure whether our adverts and emails work. These cookies and measurement scripts never send an answer from the scan to these parties; the address of a page can contain the name of a scan or of a complaint.
| Name | Purpose, who places it and how long it stays |
|---|---|
| bp_ft (cookie) | Remembers which campaign or advert someone arrived through (source, UTM values, advert id, time). Set by BioProfile. Retention: 90 days. |
| bp:plan-purchase:{ref} (localStorage) | Remembers that the purchase notification for an order has already been sent, so that it is not counted twice. Placed by BioProfile. Retention period: until you or the site clears it. |
| _fbp (cookie) | Meta pixel: recognises the browser for ad measurement. Placed by Meta (pixel). Retention period: 90 days. |
| _fbc (cookie) | Meta pixel: stores the ad click (fbclid). Placed by Meta (pixel). Retention period: 90 days. |
| multiFbc (localStorage) | Meta pixel: earlier ad clicks. Placed by Meta (pixel). Retention period: until you or the site clears it. |
| lastExternalReferrer (localStorage) | Meta pixel: the last external referrer. Placed by Meta (pixel). Retention period: until you or the site clears it. |
| lastExternalReferrerTime (localStorage) | Meta pixel: the moment that happened. Placed by Meta (pixel). Retention period: until you or the site clears it. |
| bp.attr.first (localStorage) | Tag Manager: the first campaign source (UTM or click id). Set by BioProfile. Retention: until you or the site erases it. |
| bp.attr.last (localStorage) | Tag Manager: the last campaign source. Set by BioProfile. Retention: until you or the site erases it. |
| ac_enable_tracking (cookie) | ActiveCampaign: site tracking is on. Placed by ActiveCampaign. Retention period: 30 days. |
| prism_649153315 (cookie) | ActiveCampaign: visitor recognition. Placed by ActiveCampaign. Retention period: 30 days. |
The Tag Manager container that loads our measurement scripts has a server component (gtm.bioprofile.com) whose cookies we have not fully measured yet, and the storage after you log in and after you send a form has not been fully measured yet. We will add to the list as soon as those measurements are in.
You can read how we handle your data in our privacy statement.
