BCL Corp Law

Cookie Policy

This Cookie Policy describes only the technologies this site actually uses, verified against its current configuration.

politica-cookies-v1.4-2026-09-08 · 2026-09-08

1. What they are

Cookies and similar technologies (local storage, tags and embedded content) let the site work and, when you allow it, measure usage and display the office map.

2. How they are controlled

On your first visit a notice offers three equally accessible options: accept all, reject all, or configure by category. Under “Customize” you can allow Google analytics, Google advertising and the Google Maps map separately; those three categories start switched off and none of them loads before your decision.

That control does not cover the hosting platform's own measurement, described in section 3: it runs on every page before any decision and cannot be switched off from this site.

You can change or withdraw your decision at any time from “Cookie preferences” in the site footer. Withdrawing takes the same number of steps as accepting, blocks the optional Google connections again, and deletes the measurement cookies this site can technically remove.

3. Hosting platform measurement (cannot be blocked from the site)

Verified on 7 September 2026 with a normal browser: although visitor analytics is shown as switched off in the project settings, the hosting platform still injects the script /~flock.js on every page. It creates the cookie session-id with a 30-minute lifetime and sends a visit event to /~api/analytics containing the page address, path, referrer, browser identifier, locale, approximate country derived from the device time zone, and the session identifier.

This measurement runs before you decide about cookies, is not part of this site's code, is not loaded through Google Tag Manager and cannot currently be disabled from the available settings, so the cookie preferences cannot block it. The script skips itself in automated browsers, which is why some automated checks do not detect it.

It is not classified as strictly necessary: the site works without it and its purpose is statistical, not technical. It is documented here for transparency, not as a consented category. This disclosure is a provisional measure, not a definitive compliance solution: the hosting provider (Lovable) has been formally asked to actually remove or neutralise the measurement, with no cookie and no network request, given that visitor analytics is switched off. In the meantime, you can block that script or the site's cookies in your browser or with a blocking extension.

In addition, the network that delivers and protects the site (Cloudflare) sets the security cookie __cf_bm, lasting about 30 minutes and strictly necessary to tell human traffic from automated traffic, and hosting sets the technical cookie __dpl, which identifies the deployed version of the site. Neither measures your browsing nor is used for advertising.

Cookie or technology	Provider	Purpose	Duration	Category
bcl-cookie-consent (browser local storage)	BCL Corp Law (this site)	Store your cookie decision and honour it on later visits.	Kept until you delete it or withdraw consent.	Necessary
__cf_bm	Cloudflare (network delivering the site)	Security and bot mitigation: telling human requests from automated ones. It is set by the server, is HttpOnly, and is not used for advertising or visitor profiling.	About 30 minutes (verified in the server response).	Strictly necessary · security
__dpl	Site hosting platform (Lovable)	Identify the deployed version of the site so the correct files are served consistently.	About 24 hours (as observed).	Strictly necessary · technical
session-id (platform script /~flock.js)	Site hosting platform (Lovable)	Platform visit measurement: the /~flock.js script sends a visit event to /~api/analytics with the page address, referrer, browser data and the session identifier. It runs before your cookie decision and cannot be blocked from this site.	About 30 minutes (as observed).	Platform analytics · NOT strictly necessary
_ga	Google (Google Analytics via Google Tag Manager)	Distinguish browsers for site usage statistics.	About 2 years (as observed in the current configuration).	Analytics · third party
_ga_KF23YNER7H	Google (Google Analytics 4)	Persist the measurement session state for the Analytics property.	About 2 years (as observed).	Analytics · third party
_gcl_au	Google (Google advertising tags loaded by Tag Manager)	Record interactions for Google campaign measurement.	About 3 months (as observed).	Third-party advertising
test_cookie (doubleclick.net domain)	Google / DoubleClick	Check whether the browser accepts cookies.	Minutes (temporary check cookie).	Third-party advertising

5. Google Maps

The office map is embedded Google content. It loads only if you accept the corresponding category; until then a placeholder with a button is shown and no information is sent to Google. Once loaded, Google receives your IP address and browser data and may set its own cookies.

6. Third parties

The optional measurement and map services are provided by Google (https://policies.google.com/privacy and https://policies.google.com/technologies/cookies). Site delivery and protection are provided by Cloudflare, and website and database hosting — together with the visitor measurement described in section 3 — by Lovable.

7. Browser controls

Besides this site's preferences, you can block or delete cookies in your browser settings. That is also the way to prevent the platform measurement described in section 3. Blocking necessary storage may prevent your decision from being remembered.

8. Questions

For questions about this policy, write to bclcorplaw@gmail.com.

9. Effective date and version