Cookie Policy & Tracking Disclosure
Boundless IT Solutions (“BITS”) is committed to transparent data sovereignty. This Cookie Policy explains how and why we utilize cookies, local storage, and similar technologies when you visit our website, platforms, and client portals.
Last Updated & Effective Date: October 1, 2026 · Reviewed by BITS Data Protection Office
Our Sovereign Privacy Guarantees
We never embed Google Ads, Meta Pixel, or third-party behavioral ad brokers on our platform.
We do not sell, rent, trade, or monetize your company identity, telemetry, or contact data.
You retain full sovereign rights to access, inspect, modify, or erase your stored credentials anytime.
1. What Are Cookies and Local Storage?
Cookies are compact text files placed on your computer, smartphone, or tablet when you load a web page. Local storage allows web applications to store data directly in your browser with no expiration date until explicitly cleared by the user.
BITS uses these technologies to authenticate active operations personnel, maintain enterprise security controls, remember configuration states across complex multi-screen workflows, and measure platform latency without compromising end-user privacy.
2. Categories of Cookies Employed by BITS
Strictly Necessary
Mandatory for web application security, CSRF protection, and authenticated CRM session tokens. This deployment is single-tenant — there is no tenant isolation for a cookie to provide — so this category exists to hold the session, nothing more. Cannot be turned off.
Performance & Telemetry
Nothing is collected today. There is no analytics script, no telemetry beacon and no third-party tracker running on this site — no Google Analytics, PostHog, Plausible, Clarity or Hotjar, and nosendBeacon call anywhere in the application. No dialing, dialing-queue or websocket-stability metric is collected, because no such measurement exists in this codebase; the earlier claim naming one has been removed. If telemetry is ever introduced it will be disclosed here, with its provider and retention, before it ships.
One third-party request exists, and it is not a tracker. This site loads its typeface (Geist, Geist Mono and Instrument Serif) from cdn.jsdelivr.net, so that provider sees your IP address and browser details on each page load. No form data, analytics identifier or advertising identifier is sent with it, and nothing is stored on your device by it. We are moving the fonts to our own server; until then this is disclosed here rather than left implicit.
Functional & Preferences
Remembers your selections — dark/light theme, interactive demo configuration, and edits you make to the synthetic demo workspaces. All of this stays in your own browser under localStorage and is never uploaded. (A previously listed "hardware sizing preference" key was removed: it had no implementation.)
3. Detailed Cookie & Storage Audit
The following table details all active first-party storage identifiers utilized on our public marketing domain and enterprise web app:
| Identifier | Classification | Lifespan | Technical Purpose |
|---|---|---|---|
| sb-*-auth-token | Strictly Necessary | 14 Days | Supabase session token. This is the only credential that grants CRM access — every /app/* route and API route verifies it server-side. |
| bits_demo_role | Strictly Necessary | 24 Hours | Records which demo persona you signed in as. It is httpOnly and is never used to grant or deny access — authentication always comes from the Supabase session above. |
| bits_cookie_consent_v1 | Strictly Necessary | 1 Year | Stores your consent choices and preference selections. This is the only record we keep of what you chose, and it never leaves your browser. |
| bits_theme | Functional | Persistent until cleared | Remembers your light/dark theme choice so it is applied before first paint. A legacy key, bionis-theme, is read once and migrated into this key. |
| bionis-theme | Functional | Deleted on first visit after upgrade | Legacy theme key from an earlier brand. It is read once, copied into bits_theme, and then deleted. Nothing is written to it now. |
| bits_demo_settings_v1 | Functional | Persistent until cleared | Persists your interactive settings on the /demo engine showcase. Synthetic demo data only. |
| bits_crm_state_v2 | Functional | Persistent until cleared | Stores CRM records in your browser so the workspace survives a refresh. This is local to your device and is never uploaded. |
| bits_crm_notifs_v2 | Functional | Persistent until cleared | Stores CRM notification read/unread state on your device. |
| bits_crm_sales_deals_v1 | Functional | Persistent until cleared | Persists your edits to the /crm-sales demo pipeline board. Synthetic demo data only. |
| bits_crm_sales_leads_v1 | Functional | Persistent until cleared | Persists your edits to the /crm-sales demo inbound-lead list. Synthetic demo data only. |
| bits_support_desk_v1 | Functional | Persistent until cleared | Persists your edits to the /crm-support demo ticket desk. Synthetic demo data only. |
| bits_marketing_journeys_v1 | Functional | Persistent until cleared | Persists your edits to the /crm-marketing demo journeys. Synthetic demo data only. |
| bits_commerce_billing_v1 | Functional | Persistent until cleared | Persists your edits to the /crm-commerce demo billing and subscription views. Synthetic demo data only. |
4. Managing & Revoking Your Consent
You maintain total sovereign authority over your device. You can update or revoke your preferences at any time by clicking the persistent floating “Cookie Preferences” button located at the bottom-left of every page.
Additionally, all mainstream browsers permit users to inspect, block, or delete cookies globally. Please visit the respective official guides for your browser:
- Google Chrome: Settings > Privacy and security > Third-party cookies
- Apple Safari: Preferences > Privacy > Prevent cross-site tracking
- Mozilla Firefox: Options > Privacy & Security > Enhanced Tracking Protection
- Microsoft Edge: Settings > Cookies and site permissions
5. Inquiries & Data Protection Officer Contact
If you have questions regarding this Cookie Policy, your privacy rights under Republic Act No. 10173 (Data Privacy Act of 2012), or wish to execute a subject access request, please contact our Data Protection Office:
Organization: Boundless IT Solutions OPC (BITS)
Attention: Data Protection Officer / Compliance Group
Official Inquiry Email: bits_inquiries@boundlessits.com
Supervisory Authority: National Privacy Commission (NPC), Republic of the Philippines (privacy.gov.ph)