Bump / Cookie Policy

1. General

1.1 BUMP is a Belgian private limited liability company (VAT BE0898.228.215), Aalmoezenierstraat 13, 2000 Antwerp. This policy explains how bump.nu uses cookies and comparable browser storage, in line with the Belgian Act of 10 July 2012 on electronic communications and the GDPR.

1.2 We may update this policy from time to time; the current version always applies. Changes are posted on this page with a new "last reviewed" date.

2. What bump.nu actually stores

As of the date above:

Google Analytics, if you accept it. A banner asks for your consent the first time you visit. Until you choose, no Google Analytics cookie is set — the site sends Google only an anonymous, cookieless ping with no visitor identifier, used purely in aggregate. If you accept, Google Analytics 4 sets cookies such as _ga and _ga_* to understand how visitors use the site (pages viewed, where visitors come from, and interactions like button clicks) and to distinguish returning visitors. You can accept, decline, or change your choice at any time via "Cookie preferences" in the footer. We don't use these cookies, or Google Analytics, for advertising, and Google Analytics does not use a Meta/Facebook Pixel or comparable ad-tracking script. See Google's privacy policy → for how Google itself handles this data.
One strictly-necessary login cookie, on pages that have one. From time to time, one or more client project pages may sit behind a server-checked password. Once you enter it correctly, the server sets a single cookie (PHPSESSID) so you aren't asked again for about a day, after which it expires and you'd need to log in again. It can't be read by any script, is never sent to a third party, and exists only to keep the login working — it is not used to track you. This doesn't require consent (it's strictly necessary to the page it's on), so it isn't part of the cookie banner.
One click-to-load embed. The Reset case study page can play a Spotify episode. The player only loads, and Spotify only sets anything in your browser, after you click play — nothing loads from Spotify on page visit.

3. What is a cookie?

A cookie is a small piece of data a website stores in your browser, typically to remember a technical choice (like whether you're logged in) between page loads. Similar mechanisms — like sessionStorage and localStorage — work in comparable ways but aren't automatically sent with every request. Cookies can't run programs or carry viruses, but because they can be used to track behaviour across sites, browsers let you control them.

4. Categories, for reference

Regulators generally group cookies into a few categories. Here's where bump.nu currently stands against each:

Strictly necessary — required for the site to function. The password-protected-page login cookie described in Section 2 falls here, on the pages that have one.
Functionality — remember a preference. Not currently used.
Performance / analytics — measure visits and usage. Our Google Analytics cookies fall here; see Section 2.
Third-party — set by embedded content from another site. Google Analytics, and Spotify (only after you click to play an episode); see Section 2.

5. Controlling or clearing storage

You can block or delete cookies and site storage through your browser settings:

Clearing your browser storage logs you out of any password-protected page (you'd need to log back in), resets Google Analytics' ability to recognise you as a returning visitor, and clears your saved cookie choice (so the banner asks again on your next visit) — it has no other effect on the rest of the site.

6. Governing law and disputes

This policy is governed by Belgian law. Disputes are submitted to the courts with jurisdiction over BUMP BV's registered office (Antwerp, section Antwerp).