A. What Cookies and Similar Technologies Are
Cookies are small files stored on a user device. Similar technologies may include local storage, session storage, pixels, SDKs, tags, passive identifiers and fingerprinting methods where applicable. These tools can support website delivery, preferences, analytics, embedded services, security or marketing depending on how they are implemented.
B. Current Status
At the date of this policy, the Bean Luxe website uses Vercel Web Analytics for privacy-friendly aggregate website usage measurement. The contact form also uses Cloudflare Turnstile or equivalent anti-spam protection to reduce automated misuse. Bean Luxe does not intentionally use Google Analytics, Google Tag Manager, Meta Pixel, advertising scripts, remarketing tools or marketing/profiling cookies.
If additional analytics, advertising pixels, embedded third-party services or newsletter trackers are introduced later, the cookie table and consent controls must be updated before activation where required.
C. Categories
- Strictly necessary or technical cookies and storage.
- Security and load balancing technologies.
- Preference cookies.
- Analytics cookies.
- Marketing and profiling cookies.
- Third-party embedded content cookies.
- Similar tracking technologies.
D. Legal Basis
Technical cookies and storage are used when necessary to provide the website or on the basis of legitimate interest where applicable, such as security and service continuity.
Vercel Web Analytics is used on the basis of legitimate interest for aggregate website improvement. Anti-spam protection on the contact form is used for website security and abuse prevention. Marketing, profiling and other non-essential tracking tools will rely on consent where required by applicable law before activation.
E. Cookie and Tracking Table
| Name | Provider | Category | Purpose | Duration | Legal basis | Status |
|---|---|---|---|---|---|---|
| Hosting/CDN technical logs | Hosting/CDN provider | Technical / Security | Website delivery, security, diagnostics and abuse prevention. | Provider retention period | Necessary / legitimate interest | Active |
| Essential session/storage | Bean Luxe website | Technical | Core website operation, if used. | Session or limited duration | Necessary | Where enabled |
| Vercel Web Analytics | Vercel | Privacy-friendly analytics | Aggregate website usage measurement, including page views, referrers, device/browser information and approximate location data. | Provider retention period | Legitimate interest / website improvement | Active |
| Cloudflare Turnstile | Cloudflare | Security / Anti-spam | Protect the contact form from spam, bots and automated abuse. | Provider retention period | Necessary / legitimate interest | Active on the contact form |
| Other analytics tools | None at present | Analytics | Additional usage measurement, if introduced later. | Not applicable while inactive | Consent where required | Not active |
| Marketing pixels | None at present | Marketing / Profiling | Advertising, retargeting or profiling. | Not applicable while inactive | Consent | Not active |
| Embedded third-party content | None at present | Third-party | Display embedded content, maps, videos or external services. | Not applicable while inactive | Consent where required | Not active |
F. Consent Management
No cookie banner is shown because the current setup is limited to technical/security tools including anti-spam protection and privacy-friendly aggregate analytics, with no advertising, remarketing or marketing/profiling cookies active. If tools requiring consent are activated later, users will be able to accept, reject and manage preferences before those tools are loaded. Users will also be able to withdraw or modify consent where applicable.
G. Browser Controls
Users can delete, block or limit cookies through their browser settings. Browser controls may affect website functionality, especially where technical storage is needed for core operation.
H. Updates
Bean Luxe may update this Cookie Policy when technical, legal or service changes occur. If additional analytics, marketing, profiling or embedded third-party tools are introduced, this page and the related consent mechanism must be updated before activation.
Last updated: July 5, 2026