Cookie Policy

BlackLeak Intel sets the minimum cookies required to keep you logged in and the service secure. We do not use advertising cookies, cross-site trackers, or third-party analytics.

1. Cookies we set

• bl_access — a short-lived (15 minutes) HttpOnly session token. It authenticates your API requests. Strictly necessary — without it you cannot stay logged in.
• bl_refresh — a longer-lived (7 days) HttpOnly token used only to issue new access tokens. Also strictly necessary for the login session to work.

Both cookies are marked HttpOnly (JavaScript cannot read them), SameSite=Lax, and Secure in production. They are scoped to the /api/proxy path and are never sent with image, font, or stylesheet requests.

2. What we do not use

• No advertising or retargeting cookies.
• No third-party analytics or fingerprinting scripts.
• No cross-site trackers of any kind.

Because the only cookies in use are strictly necessary for the service you requested (authentication), no consent banner is required under the ePrivacy Directive / similar regimes. If that ever changes, this page and the service will ask for consent before any non-essential cookie is set.

3. Controlling cookies

You can delete or block these cookies in your browser settings at any time. The effect is simply that you will be logged out and need to sign in again.

4. Changes

Material changes to this policy will be posted on this page.