Who we are
Bookish Badger is a trading name. In this document “we”, “us” and “our” mean the person or business named as the seller in the Business details of our Terms of sale, Returns, Privacy notice and Contact us pages, trading as Bookish Badger. Those pages give the seller’s name, geographic address and, where they apply, company and VAT details. Every page gives our email addresses. This notice explains the cookies and similar technologies on the Site. Our Privacy notice explains how we use personal data more generally.
Strictly necessary cookies
These are needed for services you ask for, so they are set without asking for consent. Turning them off in your browser will stop those services working.
better-auth.session_token (prefixed __Secure- on the live site): keeps readers, authors and staff signed in. It lasts 24 hours and is renewed while you are active.
better-auth.dont_remember: a cookie that lasts only until you close your browser, recording that you chose not to stay signed in.
better-auth-passkey and similar short-lived sign-in cookies: protect a passkey, Google or Discord sign-in while it is in progress. They last a few minutes.
bb_order_access and bb_support_access: let you view your order or support conversation after you open a private link. They last up to 24 hours, and never longer than the link itself (30 days).
Storage in your browser
Some information is kept in your browser’s local storage rather than in cookies. It stays on your device and is not sent to us automatically.
bb-basket-v1: the Books and quantities in your basket, removed when you complete an order or clear your basket.
bb-reader:<edition>: your place in a book and your theme and font choices in our online reader.
Author workspace drafts: unsaved changes to a submission form, so they are not lost if the page closes.
bb-analytics-consent: your analytics choice, so we do not ask again.
Security checks
Some forms use Cloudflare Turnstile to check that you are a person, not a bot. It runs in a frame served by Cloudflare and may use storage on Cloudflare’s own domain for that purpose. It is used only for security, never for advertising. Cloudflare’s privacy notice applies.
Payment
When you check out you move to Stripe’s payment page, where Stripe sets its own cookies for payment security and fraud prevention. Stripe’s cookie notice applies there. Stripe does not set cookies on our Site.
Analytics: what happens by default
We use PostHog, hosted in the European Union, to understand which pages are used and where people click, so that we can improve the Site.
Unless you say yes to analytics cookies, analytics is cookieless: nothing is stored on your device. Page views, clicks and a small number of events (adding to the basket, starting checkout, returning from payment) are counted using an anonymous identifier that PostHog derives on its servers and that changes every day. Your IP address is discarded and never stored. We rely on our legitimate interest in understanding how the Site is used, and on the exception in the law for storage and access needed for statistics that help us improve our service.
If you would rather we did not count your visits at all, turn on Global Privacy Control or Do Not Track in your browser. Analytics then does not load.
Analytics: if you say yes
If you choose “Yes” when we ask, PostHog sets a cookie and stores an identifier in your browser (names beginning ph_) so that your return visits can be connected, for up to one year. We also record anonymised sessions (how pages are scrolled and clicked) to find problems. Everything you type is masked and never recorded.
Analytics, with or without cookies, never runs on account, sign-in and password pages, the author workspace, staff pages, order tracking, private support conversations or the online reader. We remove query strings and fragments from page addresses, except the category, collection and page filters, and we never send names, email addresses or postal addresses to PostHog. Analytics data is not linked to your account and is never used for advertising.
Changing your choice
You can change your analytics choice at any time with Cookie choices at the bottom of every page. If you withdraw consent, the analytics cookie and identifier are removed and recordings stop. You can also delete cookies and local storage in your browser settings; this signs you out, empties your basket and may block private access until you open a valid link again.