Cookie Notice

Overview

Cookies and similar technologies (such as local storage) are small pieces of data stored in your browser. BuyerPass uses a deliberately small set: some are strictly necessary to run the site and remember your choices, and others measure product analytics where permitted. Whether analytics runs before you make a choice depends on your region, as described below. We group them into the categories below.

Strictly necessary

These are required for the site to function and to honor your preferences. They do not require consent.

• bp_consent stores your cookie and analytics consent choice so we can honor it on future visits. It is shared across buyerpass.com and its subdomains, so a choice made on our website also applies in the BuyerPass application in the same browser. It is also how our servers know whether analytics is permitted for requests from your browser.
• bp_regionrecords only a coarse region class (whether prior-consent defaults apply), derived from your connection's country, so we can apply the right default cookie settings. It contains no identifier and expires after one day.
• Session and security storage keeps you signed in to the application and supports anti-abuse protection (including Cloudflare Turnstile on sign-in and sign-up).

Analytics

Where analytics is permitted (see Default states and consent), BuyerPass uses PostHog and Google Analytics 4 to measure a fixed, defined list of non-sensitive product events and coarse dimensions such as account type. These providers set their own cookies or identifiers, which are pseudonymous. We do not use broad automatic event capture, and we never attach your email, name, organization, financial data, or verification outcomes to analytics events. The exact cookie names and lifetimes are set by these providers; see their privacy policies for details.

Some events are recorded by our servers when you take an action, rather than in your browser. Those events follow the same analytics permission as the browser you used: if analytics is off for that browser (by your choice, a GPC or Do Not Track signal, or a prior-consent regional default), the event is not sent. Because your choice is stored in your browser, it is not automatically carried to other devices or browsers.

• bp_attr is a first-party cookie that stores limited attribution about how you arrived from an outside link: campaign tags (UTM parameters), advertising click identifiers where present (such as Google, Meta, or Microsoft click IDs), a campaign reference, the referring site, and the page you landed on. It keeps the first touch and the most recent outside visit, lasts up to 30 days, and is shared across buyerpass.com and its subdomains. It is set only while analytics is permitted and is deleted if analytics is turned off. It is written to our records only if you create an account.
• Session replay (Microsoft Clarity). In the BuyerPass application only (not this marketing site), and only while analytics is permitted, BuyerPass uses Microsoft Clarity to understand how pages are used through session replay and heatmaps. Recording is limited to a defined set of general pages, such as sign-in, sign-up, home, help, and opportunity lists. Pages involving bank linking, proof of funds, verification, supporting documents, billing, account settings, individual buyer and opportunity details, and staff administration are excluded. On recorded pages, Clarity is configured to mask page text and form inputs. Clarity is an analytics tool, not a strictly necessary one. Clarity sets first-party cookies (such as _clck and _clsk), which we delete when you turn analytics off; cookies Microsoft sets on its own domains are governed by Microsoft's privacy statement.

Advertising

BuyerPass's consent system includes support for an advertising category, but advertising pixels and conversion trackers are not currently active on our site. Advertising features in our analytics tools are turned off, and we do not use advertising cookies to target you. If this changes, we will update this notice and manage it through the same consent controls.

Default states and consent

Default settings depend on the region your connection appears to come from:

• Regions where we apply prior consent. If your connection is identified as coming from the European Economic Area, the United Kingdom, or Switzerland, analytics and session replay are off until you accept them in the consent banner.
• Everywhere else. Product analytics and session replay (Google Analytics 4, PostHog, and Microsoft Clarity, with the protections described above) may operate by default, including when your region cannot be determined. We show a notice with a link to Cookie preferences, where you can turn analytics off at any time.
• Advertising, everywhere. Advertising technologies are a separate category that is off by default in every region and is never turned on merely because analytics is permitted.

Strictly necessary cookies are always active because the site cannot function without them. An explicit choice you make always takes precedence over these defaults, and you can change it at any time.

GPC and Do Not Track

Where our tools support it, we honor the Global Privacy Control (GPC) and Do Not Track browser signals and treat them as a request to keep non-essential analytics, session replay, and advertising off. These signals take precedence over regional defaults and over any banner choice. Rejecting analytics, GPC, and Do Not Track do not turn off strictly necessary cookies, which the site needs in order to work.

Managing your choices

You can change your consent choice at any time using the site's cookie controls, and you can block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent parts of the site from working. For more on how we handle personal information, see our Privacy Policy.

Contact us

Questions about cookies or your choices? Email us at privacy@buyerpass.com or use our contact form.

Prefer to call? Reach us at (404) 236-9149.