Cookie Policy

Last updated: 2026-09-13

This policy explains the cookies and similar browser storage BusyBee Hub uses on our website and in the app. It should be read with our Privacy Policy.

1. What cookies are

Cookies are small files a website stores in your browser. Websites can also keep information in your browser's local storage or session storage. We call all of these "cookies" in this policy.

2. Our approach

We only use cookies that BusyBee Hub needs to work, such as keeping you signed in and keeping your account secure. We don't use analytics, advertising or tracking cookies, and we don't let advertisers place cookies on our website.

UK law allows strictly necessary cookies without asking for consent, but we list every one here so you know what they do.

3. Cookies we set

sb-[project]-auth-token (in the app)

What it does: keeps you signed in and lets the app check who you are on each page. Large sessions may be split across cookies ending .0, .1 and so on.
How long it lasts: up to 400 days, renewed while you use BusyBee Hub, and removed when you sign out.

sb-[project]-auth-token-code-verifier (in the app)

What it does: protects the sign-in when you use Google or Apple, by checking that the sign-in is completed in the same browser that started it.
How long it lasts: removed once sign-in completes.

bbh_invite (in the app)

What it does: remembers the team invitation you accepted while you confirm your email address, so your new account joins the right organisation.
How long it lasts: 7 days, or until your account is linked to the invitation.

4. Browser storage we use

bbh-cookie-consent (local storage, on our website)

What it does: remembers the choice you made on our cookie banner so we don't ask again.
How long it lasts: until you clear your browser storage.

bbh.hmrc.device_id (local storage, in the app)

What it does: a random identifier for your browser. HMRC requires software to send it, with other fraud prevention information, whenever it contacts HMRC for you.
How long it lasts: until you clear your browser storage.

finble:conversation:[organisation] (session storage, in the app)

What it does: keeps your current Finble conversation open if you close and reopen the chat.
How long it lasts: until you close the browser tab.

5. Other companies' cookies

Cloudflare Turnstile. Our sign-in, registration, password reset and contact forms use Cloudflare Turnstile to check that they're being used by a person, not a bot. Turnstile may set its own cookies or use browser storage for this. See Cloudflare's privacy policy.

Pages hosted by other companies. When you pay through Stripe, connect your bank through TrueLayer, connect to HMRC, or sign in with Google or Apple, you're taken to their own pages. Those companies may set cookies there under their own policies. We don't embed their tracking scripts on our pages.

Fonts. Our fonts are served from our own website, so loading a page doesn't contact Google or set any font-related cookies.

6. Our cookie banner

Our website shows a banner asking you to choose "Essential only" or "Allow analytics". We don't use any analytics today, so both choices currently have the same effect: only the cookies listed above are used. If we ever add analytics, we'll update this policy first and only use analytics cookies if you've chosen "Allow analytics".

7. Managing cookies

You can block or delete cookies and browser storage in your browser settings. If you block the cookies listed in section 3, you won't be able to sign in to BusyBee Hub. If you clear the HMRC device identifier, a new one is created the next time it's needed.

8. Changes and contact

We'll update this policy if the cookies we use change. The date at the top shows when it was last updated. Questions? Email support@busybeehub.co.uk.