A. What Cookies and Similar Technologies Are
Cookies are small files stored on a user device. Similar technologies may include local storage, session storage, pixels, SDKs, tags and other identifiers where applicable. These tools can support website delivery, preferences, analytics, embedded services, security or marketing depending on how they are implemented.
B. Current Status
Bean Luxe uses a consent banner to let users accept analytics, reject non-essential tools or manage preferences. Necessary technical and security storage remains active to deliver the website.
Google tag (Google Analytics), Vercel Analytics, Vercel Speed Insights and Supabase-backed custom analytics for the website, Compass preview, Coffee Guide and key CTAs are loaded only after analytics consent is given. After consent, Bean Luxe may create a session-level identifier in sessionStorage to associate analytics events within the current browser session.
Bean Luxe does not intentionally use Google Tag Manager, Meta Pixel, advertising scripts, remarketing tools or marketing/profiling cookies.
C. Categories
- Strictly necessary or technical cookies and storage.
- Security and anti-spam technologies.
- Analytics cookies and similar analytics storage.
- Marketing and profiling cookies.
- Third-party embedded content cookies.
D. Legal Basis
Technical cookies and storage are used when necessary to provide the website or on the basis of legitimate interest where applicable, such as security and service continuity.
Optional analytics categories, including Google tag (Google Analytics), Vercel Analytics, Vercel Speed Insights, Supabase custom analytics and the related sessionStorage identifier, rely on consent before activation. Marketing, profiling and other non-essential tracking tools are not currently active and would rely on consent where required by applicable law before activation.
E. Cookie and Tracking Table
| Name | Provider | Category | Purpose | Duration | Legal basis | Status |
|---|---|---|---|---|---|---|
| Hosting/CDN technical logs | Hosting/CDN provider | Technical / Security | Website delivery, security, diagnostics and abuse prevention. | Provider retention period | Necessary / legitimate interest | Active |
| Analytics session identifier (sessionStorage) | Bean Luxe website | Analytics / Service improvement | Associate Compass preview, Coffee Guide and contact funnel events within the current browser session after analytics consent without creating user accounts or persistent profiles. | Current browser session | Consent | Created only after analytics consent |
| Google tag (Google Analytics) | Analytics / Measurement | Aggregate website traffic and key interaction measurement, including page views and selected site events, loaded only after analytics consent. | Provider retention period | Consent | Active only after analytics consent | |
| Vercel Analytics and Speed Insights | Vercel | Privacy-friendly analytics | Aggregate website usage and performance measurement, including page views, referrers, device/browser information and approximate location data, loaded only after analytics consent. | Provider retention period | Consent | Active only after analytics consent |
| Supabase custom analytics events | Bean Luxe / Supabase infrastructure | Privacy-aware analytics | Measure custom product and content events for Compass preview, Coffee Guide, language switches, partner/service pages and the contact funnel. No advertising profiling or remarketing. | Raw events up to 12 months; aggregated reports may be retained longer | Consent | Active only after analytics consent |
| Cloudflare Turnstile | Cloudflare | Security / Anti-spam | Protect the contact form from spam, bots and automated abuse. | Provider retention period | Necessary / legitimate interest | Active on the contact form |
| Marketing pixels | None at present | Marketing / Profiling | Advertising, retargeting or profiling. | Not applicable while inactive | Consent | Not active |
| Embedded third-party content | None at present | Third-party | Display embedded content, maps, videos or external services. | Not applicable while inactive | Consent where required | Not active |
F. Consent Management
Bean Luxe shows the consent banner when no choice has been stored. Users can accept analytics, reject non-essential tools or open the preferences panel without any forced consent flow. Analytics remains blocked until consent is given.
Preferences can be reopened at any time from the footer through the "Cookie preferences" link. Marketing or profiling cookies are not currently used.
G. Browser Controls
Users can delete, block or limit cookies through their browser settings. Browser controls may affect website functionality, especially where technical storage is needed for core operation.
H. Updates
Bean Luxe may update this Cookie Policy when technical, legal or service changes occur. If additional analytics, marketing, profiling or embedded third-party tools are introduced, this page and the related consent mechanism must be updated before activation.
Last updated: July 18, 2026