Cookie policy

Cookies are small files a site stores in your browser. Related technologies — local storage and session storage — do the same job for web applications. Both are covered by this policy, and we refer to them together as “storage”.

These are required for the site and portal to function and cannot be switched off:

• Authentication session — after you sign in, your session token is stored in your browser so the portal knows which cases are yours. Removing it signs you out.
• Session refresh — a value used to renew your session so you are not logged out mid-upload.
• Security and abuse prevention — short-lived values used to detect duplicate or automated submissions of the intake form.

We may keep small interface preferences locally — for example the last case you had open in the portal — so the application behaves predictably between visits. This data stays in your browser and is not used to build a profile of you.

We do not run advertising cookies, retargeting pixels or social media trackers. Where we measure aggregate traffic, it is limited to counts that do not identify individual visitors, and any change to this practice will be reflected in this policy before it takes effect.

If you choose to sign in with Google, that provider may set its own storage under its own domain and policy. That step is optional; you can create a portal account with an email address and password instead.

Every major browser lets you view, block and delete cookies and site data — usually under Privacy or Site settings. You can also use private browsing.

Be aware that blocking strictly necessary storage will prevent you from signing in to the client portal or uploading evidence to a case, because the portal will no longer be able to recognise your session.

Questions about this policy: support@bitaps.co. See our privacy policy for the full picture of how personal data is handled.