Cookie policy
Which cookies Bema uses and why.
Last updated: October 19, 2026
Draft pending review. Bema is not yet a registered organisation and some details of the controller are still to be completed (highlighted in yellow). We will review these texts with legal advice before the final launch.
1. What cookies are
Cookies are small files a website stores in your browser to remember information from one visit to the next.
2. Which ones we use
We only use cookies that are essential for the platform to work:
- bema_access_token and bema_refresh_token (first-party): keep you signed in. Page scripts cannot read them (HttpOnly); they last 7 days and are deleted when you sign out.
- bema_session (first-party): tells the page a session is open, with no personal data in it. It lasts as long as the session.
- NEXT_LOCALE (first-party): remembers the language you chose. It lasts until you close your browser.
- reCAPTCHA Enterprise (Google): when enabled, helps tell people apart from automated programs to protect the platform from abuse. Google may store its own technical cookies.
We do not use analytics, advertising or social media cookies.
3. Why we do not ask for consent
Cookies that are essential to provide a service you have requested, such as keeping you signed in, are exempt from consent under Article 22.2 of the LSSI-CE. That is why we do not show a cookie banner. If we ever add non-essential cookies, we will ask for your permission first.
4. How to delete them
You can view and delete cookies in your browser settings. If you delete the session cookies, you will need to sign in again.
5. Changes
If we change the cookies we use, we will update this page.