Cookie Policy

A cookie is a small text file your browser saves on your computer or phone when you visit a website. Cookies are used to remember your session, keep your choices and measure how the site is used.

Essential cookies always run. Analytics and marketing cookies load only if you allow them in the cookie banner. If you don't, the code of these services never runs on the site. You can see which services are on right now in Cookie settings.

2.1 Essential cookies and browser storage

Needed for the site to work. They don't need your consent and can't be turned off:

• byc_session: Keeps you signed in to your account. 30 days if "Remember me" is ticked, otherwise until you close the browser.
• byc_pay_<order number>: Lets only the browser that placed the order open its card payment page. Lasts 7 days.
• byc_order_<order number>: Keeps your email address after you place an order, so your order page opens without your email address in the page address. Lasts 24 hours.
• byc_consent: Keeps your cookie choice. Lasts 12 months, then we ask you again.
• byc_oauth, byc_oauth_ticket, byc_oauth_confirm: Let you finish a Google or Facebook sign-in or sign-up only in the browser where you started it, and protect those steps. They last at most 10 minutes, 15 minutes and 30 minutes.
• Browser storage (not cookies): Your cart, the car you chose on the home page and, if you add favorites without signing in, your favorites list. These stay in your browser until you clear them. The details of the checkout step are kept only for the open tab and are deleted when you close it. A card payment's reference number stays until that payment is finished. When you sign in, the favorites you added without signing in are added to your account and removed from your browser.

Language and currency come from the page address (/, /en, /en-eu), so we use no cookie for them. Our own visitor counter uses no cookies and no browser storage. Our server makes a summary (hash) of your IP address and browser details that changes every day, and counts visits with it. With each visit it also records the country and city (estimated from the IP address), the device type and where the visit came from; it does not keep your IP address or browser details. While a page is open and on screen, your browser sends a short signal once a minute, so we can see how many people are on the site right now. We don't share this data with anyone.

2.2 Analytics cookies (only with your consent)

Google Analytics 4 lets us measure which pages are visited. It puts a random ID number in your browser. The number doesn't show your name, but it isn't anonymous either: it links the visits that come from the same browser. We never send personal details from the address bar, such as an email address or a password reset link, to Google.

• Cookies: _ga and _ga_<id> (Google's cookies, saved under our site's name) and byc_ga_ids (our own cookie, so we can attach your Google Analytics ID to your order). They last at most 12 months after your last visit.
• Orders: If you allowed analytics cookies and you place an order, your Google Analytics ID, the order number, the amount and the products are also sent from our server to Google (Measurement Protocol). Your name, email address and postal address are not sent.
• Campaign details: If you came to our website through an ad or campaign link and you place an order, the campaign tags in the link (utm) and whether the ad was a Google or a Meta ad are saved with your order. We save them only if you allowed analytics cookies; the ad's click ID is not part of this record.

2.3 Marketing cookies (only with your consent)

They let us measure how our ads perform and show you personalized ads.

• Meta Pixel (Facebook, Instagram): the _fbp and _fbc cookies, at most 90 days. It reports steps such as viewing a product, adding to cart and ordering to Meta.
• Google Ads: _gcl_au, _gcl_aw and other _gcl_ cookies, at most 90 days. It measures whether a visit from an ad ends in an order. Google may also keep this in browser storage.
• Reporting from our server (Conversions API): If you allowed marketing cookies and you place an order, the order amount and products are also sent from our server to Meta, together with your email address, phone number and country in coded (hashed) form, your IP address, your browser details and the identifiers in Meta's cookies (_fbp, _fbc). Coded data is still personal data, not anonymous data. Your name, postal address and coupon code are not sent.
• Google's ad signals (Google signals, personalized ads) also turn on only with this consent, and only when Google Ads is used.

Analytics and marketing services run only when you allow them. The companies below process data abroad, including in the United States:

• Cloudflare: Every request to the site passes through Cloudflare, Inc. (United States) for content delivery and security. This service is needed for the site to work and does not depend on your consent. If a security check is needed, it may set a short-lived essential cookie.
• Google: Google LLC (United States); Google Ireland Limited for visitors in Europe.
• Meta: Meta Platforms, Inc. (United States); Meta Platforms Ireland Limited for visitors in Europe.
• Our payment provider: may use its own cookies for the 3D Secure step of a card payment.

These companies also process the data under their own privacy policies. When the Meta Pixel or the Google Ads tags run on our site, we and Meta or Google decide together on collecting your data and sending it to them, so we are joint controllers for that step only. We are responsible for telling you about it. What Meta or Google do with the data after they receive it is their own responsibility, and you can use your rights about that data with them directly (facebook.com/about/privacy, policies.google.com/privacy). For Google Analytics, Google processes the data on our behalf as our service provider. You can ask us for the main points of our arrangement with Meta and Google. For more about how your personal data is processed and transferred abroad, read our Privacy Notice.

You can change your choice or withdraw consent any time with the Cookie settings link at the bottom of every page. If you withdraw consent, we delete those cookies and reload the page. From then on these services don't run.

Open cookie settings

If your browser sends a GPC (Global Privacy Control) signal, marketing cookies stay off unless you turn them on.

You can also delete or block cookies in your browser settings:

• Chrome: Settings > Privacy and security > Cookies
• Safari: Preferences > Privacy > Cookies and Website Data
• Firefox: Settings > Privacy & Security > Cookies and Site Data
• Edge: Settings > Cookies and site permissions

If you block essential cookies, features such as the cart and your session may stop working.

• Your cookie choice (byc_consent): 12 months. When it runs out, or when the services we use change, we ask you again.
• Google Analytics cookies: at most 12 months after your last visit.
• Meta and Google Ads cookies: at most 90 days.
• Session cookie: 30 days, or until you close the browser. Payment cookie: 7 days. Order cookie: 24 hours.
• Google or Facebook sign-in cookies: 10 to 30 minutes.
• Browser storage (cart, your car, favorites): until you delete it. Favorites move to your account when you sign in.
• Order report mark (browser storage): When we report an order to Google or Meta with your analytics or marketing consent, we keep a mark with the order number in your browser, so the same order is not reported twice. It lasts 8 days.
• Consent records: We keep each choice for 24 months with a random record number, without your IP address or browser details. This record is the proof of your choice.
• Consent record of an order: Your choice at the moment you ordered is kept with the order. The IP address, browser details and cookie IDs in it are deleted within 8 days at the latest.

For questions about our cookie policy, contact us at info@bycperformance.com.