Cookie and Browser Storage Notice

Effective date: Oct 10, 2026

This notice explains how Lingonberry Island Ltd. (Business ID FI2912630-1, Finland) uses cookies and similar browser-storage technologies on the Buyervalues.ai website and application. The Privacy Notice explains the related personal-data processing.

1. Technologies we use

Cookies are small text files stored by a browser. We also use comparable technologies, including local storage, session storage, and storage used by the Firebase Authentication software development kit.

2. Necessary storage

Necessary storage supports authentication, security, navigation, requested form flows, consent preferences, and other core functions. It is used without an optional analytics or marketing consent where applicable law permits.

Current necessary or preference storage includes:

Cookie or storage	Purpose	Typical duration
Firebase Authentication browser storage	Keeps a User signed in and supports secure authentication	Until sign-out, browser clearing, or expiry under Firebase configuration
`scaffold_cookie_consent_v1` in local storage	Records analytics and marketing choices so the banner respects them	Until the choice is changed or browser storage is cleared
`buyervalues.analysis-intake.v1` and `buyervalues.analysis-resume.v1` in session storage	Preserves an in-progress company-analysis intake and its resume state	Browser-tab session or earlier completion/removal
`scaffold_billing_flow_id` in session storage	Keeps a billing flow consistent while it is in progress	Browser-tab session or earlier completion/removal
`hello_selected_dossier_v1:workspace:<id>` in local storage	Remembers the selected dossier for the relevant Workspace	Until replaced, removed, or browser storage is cleared

Exact Firebase storage keys are controlled by the Firebase SDK and may change between versions.

3. Optional analytics

The optional Traffic module also measures visible browser arrivals through article-marked links, recognized AI-service referrals or allowlisted declared campaign sources, plus their first service-related click. It sends up to two small requests to our own domain only after analytics consent. A temporary random identifier is kept in memory for deduplication, never in cookies or browser storage, and expires after 24 hours or document closure. Article markers contain existing public paths, not identities. Withdrawing consent stops subsequent signals. Blocking scripts or refusing consent means those browser observations are not collected. See the Privacy Notice for application and native Hosting log retention.

Separately, existing server request logs are used to produce hourly counts of public-page and article requests from browser-like clients without recognized bot claims. These likely-human counts do not use a visitor/session identifier, IP reference, cookie, browser storage, or an additional browser tracking request. They can include ordinary page requests when optional browser analytics is declined. Only aggregate counts and approved public-page/source categories are retained by this counter; original Hosting logs have their separate retention. Counts are requests, not unique people or verified human visits.

If a Google Analytics measurement ID is configured, Google Analytics is loaded only after analytics consent where consent is required. It may set cookies such as _ga and _ga_* and process online identifiers, device/browser information, coarse location, and usage events. Their lifetime depends on the configured Google Analytics property and browser controls and may be up to two years.

The current implementation requests IP anonymization. We do not authorize advertising features or Google Signals through this notice. If those features or another analytics provider are introduced, this notice and the consent controls must be updated before activation.

The preferences interface also includes a marketing category. In addition to marketing technology that may be configured later, this category controls third-party embedded media as described below.

4. Optional embedded media

Some blog articles include a YouTube video. The embedded player is not loaded until marketing consent is granted. If granted, the browser connects to YouTube's privacy-enhanced youtube-nocookie.com domain. Google or YouTube may then process network, device, browser, referrer, and interaction information and may use cookies or similar storage under its own terms and privacy policy. A separate Watch on YouTube link opens YouTube directly at the User's request.

5. Your choices

You can accept or reject optional categories in the banner and change the choice later through Cookie settings in the website footer. Withdrawing consent does not affect processing that occurred lawfully before withdrawal. You can also clear or block storage in the browser, but doing so may sign you out, remove an in-progress form, or prevent a requested feature from working.

6. Updates and contact

We update this notice when the deployed technologies or their purposes change. For questions, contact info@lingonberryisland.com.