Cookiepolicy
Cookie Policy
Bruukki - Learning Material Creator Platform
Effective Date: February 1, 2026 Last Updated: April 17, 2026
1. Introduction
This Cookie Policy explains how Bruukki ("we", "us", "our") uses cookies and similar technologies on our website and platform. This policy should be read together with our Privacy Policy.
2. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. They help the website remember your preferences and understand how you use the service.
Types of Storage Technologies
| Technology | Description |
|---|---|
| Cookies | Small text files stored in your browser |
| Local Storage | Browser storage for larger amounts of data |
| Session Storage | Temporary storage cleared when browser closes |
3. How We Use Cookies
3.1 Strictly Necessary Cookies
These cookies are essential for the Service to function. They cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
session_id | Maintains your login session | Session |
csrf_token | Security protection against CSRF attacks | Session |
auth_token | Authentication state | 7 days |
Legal Basis: Legitimate interest (service provision)
3.2 Functional Cookies
These cookies remember your preferences and settings.
| Cookie | Purpose | Duration |
|---|---|---|
language | Your preferred language | 1 year |
theme | Light/dark mode preference | 1 year |
editor_settings | Editor preferences (font size, etc.) | 1 year |
Legal Basis: Legitimate interest (user experience)
3.3 Analytics
We do not use analytics cookies. For marketing-site traffic (bruukki.com) we use Plausible Analytics — an EU-based (Estonia), cookieless analytics service that collects only anonymous aggregate data. It does not set cookies and does not store personal data, so no consent is required.
In addition to the client-side page analytics described above, we also send a small number of server-side events from our backend (AWS Lambda) to Plausible — specifically a Signup custom event when a user creates an account, with anonymous properties such as the authentication method and any UTM campaign attribution. These events contain no user identifiers (no name, no email, no user ID) and are sent with synthetic request headers so that visitor IP is not recorded. They remain anonymous aggregate analytics data.
| Service | Processing | Privacy Policy |
|---|---|---|
| Plausible Analytics | Anonymous aggregate website analytics (client-side page views + server-side signup events; no cookies, no personal data) | plausible.io/privacy |
For authenticated users, product usage analytics is based on server-side event tracking and does not require cookies or third-party scripts. We do not track:
- Content of your materials
- Keystrokes or form inputs
- Cross-site behavior
Legal Basis: Legitimate interest (service improvement; no personal data involved)
3.4 Third-Party Cookies
We may use the following third-party services that set their own cookies:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Stripe | Payment processing | Stripe Privacy |
Legal Basis: Consent (where required)
4. Cookie Consent
4.1 Current Cookie Usage
We currently use only strictly necessary and functional cookies that do not require consent under ePrivacy Directive. If we introduce analytics or third-party cookies in the future, a consent banner will be displayed before such cookies are set.
4.2 Managing Cookies
You can manage cookies through your browser settings (see Section 5). Note that blocking strictly necessary cookies may prevent the Service from functioning correctly.
4.3 Withdrawing Consent
If consent-based cookies are introduced in the future, you will be able to withdraw consent at any time. Withdrawal will:
- Stop future data collection via those cookies
- Not delete data already collected (contact us for deletion)
5. Managing Cookies in Your Browser
You can control cookies through your browser settings:
| Browser | Instructions |
|---|---|
| Chrome | Settings → Privacy and Security → Cookies |
| Firefox | Settings → Privacy & Security → Cookies |
| Safari | Preferences → Privacy → Cookies |
| Edge | Settings → Privacy → Cookies |
Note: Blocking all cookies may affect Service functionality.
6. Cookie Retention
| Category | Typical Retention |
|---|---|
| Session cookies | Until browser closes |
| Functional cookies | 1 year |
| Analytics cookies (if introduced) | Up to 2 years |
| Authentication | 7 days (or until logout) |
7. Do Not Track
Some browsers support "Do Not Track" (DNT) signals. We currently do not use analytics cookies, so DNT signals do not affect Service functionality. If analytics cookies are introduced, we will respect DNT signals by disabling them for users who have enabled DNT.
8. Updates to This Policy
We may update this Cookie Policy to reflect changes in our practices or for legal reasons. Changes will be indicated by the "Last Updated" date.
9. Contact Us
For questions about our use of cookies:
Email: privacy@bruukki.com
10. More Information
For more information about cookies and your rights:
- Your Online Choices (EU)
This Cookie Policy complies with EU ePrivacy Directive and GDPR requirements.