This Cookie Policy explains how Bastionsoft UAB ("Bastion", "we", "us" or "our") uses cookies and similar technologies on bastionsoft.com and its subdomains (the "Website"). It should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies — such as pixels, tags and local storage — work in comparable ways. We refer to all of these as "cookies" in this policy. They can be:
- Session cookies, which expire when you close your browser; or persistent cookies, which remain until they expire or you delete them.
- First-party cookies, set by us; or third-party cookies, set by other organisations whose services we use (such as analytics or advertising providers).
2. Your consent
We set strictly necessary cookies automatically because the Website cannot function properly without them. By default we also use cookieless analytics, which do not require your consent. All other cookies and tracking technologies — product analytics and advertising / marketing — are only set after you give consent through our cookie banner. You can accept all, reject all, or choose by category, and you can change or withdraw your choice at any time (see Section 5).
This reflects our obligations under the GDPR and the ePrivacy rules: non-essential cookies require your prior, informed consent.
3. Categories of cookies we use
The exact cookies depend on your choices and on our current providers. The categories below describe what we use; the named providers are examples and may change. You can see the live, itemised list in the cookie banner / preference centre on the Website.
3.1 Strictly necessary cookies (always on)
These are essential for the Website to work — for example, to keep the site secure, balance load, remember your cookie choices, and enable core functionality of our hosting and content-delivery provider (Firebase Hosting). They do not require consent.
| Example provider | Purpose | Typical duration |
|---|---|---|
| Firebase Hosting (Google) | Security, functionality, load balancing, storing your cookie preferences | Session to ~12 months |
3.2 Cookieless analytics (no consent required, on by default)
By default we use privacy-friendly, cookieless analytics. These do not set cookies or persistent identifiers, and help us understand aggregate traffic and usage patterns. Because no personal-data cookies are involved, they run without prior consent.
| Provider | Purpose | Data location | Cookies set |
|---|---|---|---|
| Plausible Analytics (Plausible Insights OÜ) | Aggregate page-view and event counts. No cross-site tracking, no fingerprinting. | EU (Germany) | None |
Google Analytics 4 — G-JNH8DBKTX1 (Google Ireland Ltd / Google LLC) |
Aggregate traffic and behaviour measurement. Runs in cookieless / consent-denied mode by default via Google Consent Mode v2 — no _ga cookies are written until you grant analytics consent. A cookieless measurement ping is still sent to Google's servers. |
EU processing via Google Ireland; data may be transferred to Google LLC (US) under Standard Contractual Clauses | None while consent is denied; _ga, _ga_JNH8DBKTX1 if analytics consent is granted |
3.3 Product analytics cookies (consent required)
These help us understand how visitors use the Website so we can improve it — for example, anonymous heatmaps and session recordings showing where the page can be improved. They are blocked by the browser until you give consent through our cookie banner. No personal data is sold or shared.
| Example provider | Purpose | Typical duration |
|---|---|---|
| Microsoft Clarity (Microsoft) | Anonymous heatmaps and session insights to improve the Website | Up to ~12 months |
3.4 Advertising / marketing cookies (consent required)
These services process personal information to measure and target our campaigns and to show you relevant content about products, services or topics you might be interested in. They are blocked by the browser until you give consent through our cookie banner.
| Example provider | Purpose | Typical duration |
|---|---|---|
| Google Ads (Google) | Measures conversions from Google Ads campaigns. Uses Consent Mode v2 — no cookies set unless you accept | Up to ~24 months |
| LinkedIn Insight Tag (LinkedIn) | Measure and retarget LinkedIn ad campaigns to relevant professional audiences | Up to ~24 months |
Some of these providers are located outside the European Economic Area. Where data is transferred internationally, we and our providers rely on appropriate safeguards as described in our Privacy Policy.
4. Why we use cookies
We use cookies to: keep the Website secure and functioning; remember your preferences; measure and improve the Website; and (with your consent) deliver and measure marketing. The lawful basis for non-essential cookies is your consent; the basis for strictly necessary cookies is our legitimate interest in operating a secure, functioning website.
5. How to manage your cookies
You can manage cookies in two ways:
- On our Website — open the cookie banner / "Cookie settings" link in the footer to accept, reject or adjust categories, or to withdraw consent at any time.
- In your browser — most browsers let you block or delete cookies through their settings. Blocking strictly necessary cookies may stop parts of the Website from working. Browser help pages explain how to do this for Chrome, Firefox, Safari, Edge and others.
You can also opt out of certain advertising cookies through the providers directly (for example, in your Google and LinkedIn account/ad settings) and through industry tools such as youronlinechoices.eu.
6. Changes to this policy
We may update this Cookie Policy as our use of cookies or the law changes. The "Last updated" date shows when it last changed.
7. Contact
Questions about our use of cookies? Email info@bastionsoft.com.