Cookie policy

This Cookie Policy explains how Beamy AI, operated by The Global Company ("we", "us", "our"), uses cookies and similar technologies on beamy-ai.com and app.beamy-ai.com (the "Service").

It should be read together with our Privacy Policy, which explains how we handle personal information generally. Where this policy uses terms defined in the Privacy Policy, they have the same meaning here.

This policy is written to meet the requirements of the EU ePrivacy Directive and GDPR, the UK Privacy and Electronic Communications Regulations, the Australian Privacy Act 1988, and United States state privacy laws including the CCPA as amended by the CPRA.

Cookies are small text files placed on your device by a website. They let a site remember your actions and preferences over time.

Local storage and session storage are browser storage mechanisms that hold data on your device. They are not cookies, but they perform a similar function, and where the law treats them the same we do too.

Pixels and web beacons are tiny transparent images or scripts embedded in a page or an email that record whether it was opened or viewed.

Device fingerprinting derives an identifier from the characteristics your browser reports, such as screen size, timezone, language and installed fonts.

Throughout this policy we use "cookies" as shorthand for all of these.

First-party cookies are set by us. Third-party cookies are set by another company whose service appears on our pages.

Session cookies are deleted when you close your browser. Persistent cookies remain for a set period or until you delete them.

Strictly necessary technologies always operate. The Service cannot function without them, and the law does not require consent for them. They cannot be switched off.

Everything else runs only if you consent. When you first visit our website you will see a banner offering three equally weighted choices: accept, reject, or open preferences to choose category by category.

Rejecting is exactly as easy as accepting. If you reject, no analytics or marketing technologies will be set, and we will not ask you again for six months.

You can change your mind at any time using the cookie preferences link in the footer of every page. Withdrawing consent is as easy as giving it.

We honour Global Privacy Control and other recognised opt-out preference signals sent by your browser. If your browser sends such a signal, we treat it as a rejection of non-essential technologies without showing you a banner.

We record your choice, the date and time you made it, and the version of this policy in force at that time, so that we can demonstrate we obtained valid consent. We keep that record for five years.

4.1 Strictly necessary

These operate at all times and do not require consent.

Note on beamy_anon_id: this identifier is essential to a core function you asked for. Without it, a visitor who runs a free scan and then creates an account would lose their report. It is a random value and contains nothing about you personally.

4.2 Analytics

These run only with your consent.

We deliberately use a cookieless, first-party approach to analytics wherever we can, so that we collect less about you than a conventional analytics platform would.

4.3 Marketing and advertising

These run only with your consent. If you have not consented, no advertising technology loads at all, and the third parties named below receive nothing about your visit.

If and when we add further advertising technologies, we will update this table and, where the change is material, ask for your consent again.

4.4 Abuse prevention

This is not a cookie, but we describe it here because it is a similar technology and you should know about it.

To protect our free scan from automated abuse, we derive a fingerprint from characteristics your browser reports. We do not store that fingerprint. It is converted into a salted, irreversible cryptographic hash before it is written down, and the same is done with your IP address. We cannot reverse either hash to identify your device or your IP address.

We use these hashes solely to count how many free scans have come from the same source within 24 hours, and to block excessive use. We do not use them for advertising, profiling or tracking you across websites.

Where the law requires consent for this processing, we rely on the exemption for what is strictly necessary to provide a service you requested, and on our legitimate interest in protecting our systems from abuse. You can object to this processing, but if you do we will not be able to offer you the free scan, because we would have no way to prevent it being abused.

Cloudflare provides bot protection through Turnstile. Its privacy notice is at cloudflare.com/privacypolicy.

Google provides advertising measurement, if you consent. Its privacy policy is at policies.google.com/privacy.

Meta Platforms provides advertising measurement, if you consent. Its privacy policy is at facebook.com/privacy/policy.

Stripe may set cookies on our checkout and billing pages for fraud prevention. These are strictly necessary to process a payment securely. Its privacy policy is at stripe.com/privacy.

We do not control what these companies do with information they collect. Read their policies before consenting.

Independently of our banner, you can control cookies through your browser. Most browsers let you see what is stored, delete it, block third-party cookies, block all cookies, or clear everything when you close the browser.

Instructions are usually found under Settings, then Privacy.

Be aware that blocking all cookies will break the Service. Without our strictly necessary technologies you will not be able to stay signed in, and a free scan you run will not carry over to an account you create afterwards.

Do Not Track. There is no agreed industry standard for how websites should respond to a browser "Do Not Track" signal, and we do not respond to it. We do honour Global Privacy Control, which is a recognised standard, as described in section 3.

Our transactional emails, such as email verification and password resets, do not contain tracking pixels.

Our newsletter contains a tracking pixel that tells us whether a message was opened, and links that record whether they were clicked. This helps us understand whether our newsletter is worth sending. You consented to this when you subscribed, and you can withdraw that consent by unsubscribing using the link in every message. Many email clients now block these pixels by default, which is fine and does not affect your subscription.

We may update this policy as our Service changes or as new technologies are introduced. The version number and effective date at the top will change.

If we add a new category of non-essential technology, or materially change what an existing one does, we will ask for your consent again before it is used. We will not silently expand what you agreed to.

If you have a question about this policy or about how we use cookies, contact us and we will respond within 30 days.

The Global Company
Operator of Beamy AI
Registered address: [PLACEHOLDER - registered address]
ABN: [PLACEHOLDER - ABN]
Email: privacy@beamy-ai.com

You may also complain to your data protection authority: the Office of the Australian Information Commissioner in Australia, your national supervisory authority in the European Union, or the Information Commissioner's Office in the United Kingdom.