Cookie Policy

This Cookie Policy describes how BaseBox-DB (Alexandros Pilatos) (“we”, “us”) uses cookies and similar technologies on https://basebox-db.com and related subdomains (the “Site”).

We use cookies to keep the service secure and functional, remember your preferences, and understand how visitors use the Site so we can improve the experience. This Policy should be read together with our [Privacy Policy](/privacy-policy), which explains how we process personal data more broadly.

We may update this Policy when our tools or legal requirements change. The last-updated and effective dates appear at the bottom of this page.

Cookies are small text files stored on your device (computer, tablet, or phone) when you visit a website. They help the Site recognize your browser, keep you signed in, or remember choices such as language.

Scripts are pieces of code loaded by the Site or by third-party providers (for example analytics or security services). Scripts may set or read cookies and send technical usage data to those providers.

Web beacons (also called pixels or tags) are small invisible elements embedded in pages or emails. They can help measure whether content was viewed. BaseBox-DB may use similar technologies through analytics providers listed below.

Cookies may be first-party (set by BaseBox-DB) or third-party (set by a provider we integrate with, such as Google or Vercel). Session cookies expire when you close the browser; persistent cookies remain for a defined period unless you delete them.

The table below summarizes the main categories. Exact names and durations may vary by browser and product updates.

Strictly necessary

Required for authentication, security, and core operation. These cannot be switched off in our product without losing login or basic functionality.

• `mb_access_token` / `mb_refresh_token` — httpOnly session cookies for secure sign-in (duration: session / refresh rotation).
• Language preference cookie (`basebox-language-v1` or similar) — remembers EN/EL UI choice for consistent pages.
• Infrastructure routing / security cookies from our hosting provider where applicable.

Functional & preferences

Store choices that improve usability. Some preferences use local storage in your browser (not always a cookie, but similar in purpose).

• Cookie consent choice (`basebox-db:cookie-consent-v1` in local storage) — records that you accepted the cookie notice.
• UI language, accessibility settings, and other client preferences stored locally to personalize your experience.

Analytics & performance

Help us measure traffic, performance, and feature usage in aggregate. These are not strictly necessary for the service to work.

• Google Analytics (Google LLC) — usage statistics via our configured measurement ID (e.g. `G-1B21MQMQ6H` or successor). Loaded only after Accept; may set analytics cookies (e.g. `_ga`) on your device. [Google Privacy Policy](https://policies.google.com/privacy). [Google Analytics opt-out](https://tools.google.com/dlpage/gaoptout).
• Vercel Web Analytics (Vercel Inc.) — aggregated, privacy-oriented visit metrics for pages hosted on our Vercel deployment. Loaded only after you click Accept on the cookie banner. [Vercel Privacy Policy](https://vercel.com/legal/privacy-policy).
• Vercel Speed Insights (Vercel Inc.) — Core Web Vitals and performance metrics (e.g. LCP, CLS). Loaded only after Accept. [Vercel Privacy Policy](https://vercel.com/legal/privacy-policy).

Security & abuse prevention

Protect login and forms against automated abuse when enabled.

• Cloudflare Turnstile (optional on `/login`) — human-verification widget; may set cookies or use browser storage. [Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/).

When you first visit the Site, a cookie banner at the bottom explains that we use essential cookies and that optional analytics cookies load only after you click Accept. By accepting, you confirm that you have read this Cookie Policy and agree to optional analytics storage on your device as described here and in our Privacy Policy.

Accepting the banner stores your choice in browser local storage (`basebox-db:cookie-consent-v1`), not in an httpOnly session cookie. Optional analytics scripts are not loaded on the first visit until you accept.

Withdrawing consent: You can change your mind at any time by clearing cookies and local storage for basebox-db.com in your browser settings (see section 6). Until you accept again, Google Analytics, Vercel Web Analytics, and Vercel Speed Insights will not load. Essential login cookies required for the dashboard are unaffected.

Where cookies or similar technologies process personal data, you have rights under Regulation (EU) 2016/679 (GDPR), including:

• Right to be informed — this Policy and our Privacy Policy.
• Right of access and rectification — contact us using the details below.
• Right to erasure and restriction — subject to legal and contractual limits.
• Right to withdraw consent at any time for processing based on consent (e.g. optional analytics where applicable).
• Right to lodge a complaint with the Hellenic Data Protection Authority (HDPA): Kifisias Ave. 1-3, 115 23 Athens — complaints@dpa.gr | +30 210 6475600.

For full details on data processing, subprocessors, and retention, see our [Privacy Policy](/privacy-policy).

You can control cookies through your browser settings. Most browsers let you:

• View which cookies are stored and delete them individually or in bulk.
• Block third-party or all cookies (may break sign-in).
• Enable “Do Not Track” or similar privacy signals (effect varies by provider).

Quick paths (may vary by version):

• Google Chrome: Settings → Privacy and security → Third-party cookies / See all site data.
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data.
• Apple Safari: Settings → Privacy → Manage Website Data.
• Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies.

After deleting cookies, you may need to sign in again and the cookie banner may reappear.

Questions about this Cookie Policy or how we use cookies:

BaseBox-DB (Alexandros Pilatos) Address: Nafpaktou 1, Agia Varvara, 12351 Phone: 6986563325 Email: info@basebox-db.com Privacy / DPO: info@basebox-db.com