Version 1.0 --- Effective 2026-10-01 · last updated 2026-09-12
This Cookie Policy explains how BOMSync, Inc. ("BOMSync", "we", "us") uses cookies and similar technologies on BOMSync websites and web applications.
It should be read together with the Privacy Policy.
1. What cookies are
Cookies are small text files or similar browser storage mechanisms used to remember information about a browser, device, session, or preferences.
We may also use comparable technologies such as local storage, session storage, security tokens, and pixels where appropriate. In this Policy, we refer to these technologies collectively as "cookies" unless the context requires otherwise.
2. Cookie categories
Strictly necessary
These are required to provide or secure the site or Service and do not require consent where applicable law permits them without consent.
They may support:
- authentication and account sessions;
- security and fraud prevention;
- load balancing and service routing;
- CSRF and other security protections;
- tenant/session context;
- preserving a user's cookie-consent choice; and
- completing a user-requested payment or account workflow where the cookie is technically necessary.
Disabling these through the browser may prevent portions of the Service from functioning.
Functional
Functional cookies may remember choices such as:
- language;
- interface preferences;
- display or layout settings; and
- optional application preferences.
Where applicable law requires consent for a functional cookie, BOMSync will not set it before that consent is obtained.
Analytics
BOMSync may use analytics cookies to understand how websites or application features are used and to improve performance and usability.
Where consent is required, including for non-essential analytics cookies in the EEA and UK, BOMSync will not activate those cookies until the user has consented.
Payment and fraud-prevention cookies
Our payment provider may use cookies or comparable technologies in connection with payment authorization, fraud detection, and checkout security.
Some of those technologies may be strictly necessary for a transaction. Others will be handled according to the consent rules applicable to the user.
3. Current cookie inventory
The exact cookie names, providers, purposes, and expiration periods can change as BOMSync's authentication, application, payment, and consent-management implementation evolves. The production cookie-consent interface also lists the current active inventory before consent is requested.
BOMSync will not describe a third-party analytics or advertising cookie as active unless it is actually deployed. Google Analytics is not used on the public marketing site.
Strictly necessary (always on)
Name Provider Purpose Duration
bomsync_cookie_consent BOMSync Remembers your cookie 1 year
choices (banner /
Cookie Settings) so we
do not re-prompt on
every visit. Also
mirrored in
localStorage under
the same key.
Additional strictly necessary cookies may be set by the hosting platform or authentication flows when you use signed-in product surfaces; those are required for security and session continuity.
Analytics (consent required in the EEA/UK)
Loaded only after you accept analytics in the cookie banner or Cookie Settings. Provider: Microsoft Azure Application Insights (first-party script on bomsync.com).
Name Provider Purpose Duration
ai_user Microsoft Distinguishes returning Up to 1
Azure visitors for usage year
Application trends (no advertising
Insights profile).
ai_session Microsoft Groups activity into a About 30
Azure browsing session. minutes of
Application inactivity
Insights
Server-side Application Insights request telemetry (no browser cookie) may still record coarse page/request metrics for reliability. The browser SDK and its cookies above remain consent-gated.
4. Consent
Where consent is legally required, BOMSync will request it before setting non-essential cookies.
A user may:
- accept or reject non-essential categories through the cookie banner or settings interface;
- change a previous choice through the Cookie Settings link in the site footer; and
- use browser settings to delete or block cookies.
Rejecting non-essential cookies will not prevent access to core BOMSync functionality, although optional preferences or features may be affected.
Consent choices may be stored in a strictly necessary cookie or local-storage item so that BOMSync can remember the user's selection.
5. Duration
Cookies may be:
- session cookies, which expire when the browser session ends; or
- persistent cookies, which remain until their configured expiration or deletion.
BOMSync will configure retention appropriate to the purpose of the cookie and will disclose current expiration periods through the cookie-management interface where required.
6. Third-party services
Some cookies may be set or read by service providers involved in a requested function, such as payment processing, security, or an enabled analytics service.
Third-party processing of personal data is addressed in the Privacy Policy and, where applicable, the Subprocessor List.
7. No behavioural advertising sale
BOMSync does not sell personal data and does not use cookies to sell personal data or share it for cross-context behavioural advertising as described in the Privacy Policy.
If BOMSync later introduces a materially different advertising or tracking practice, this Policy and the consent interface will be updated before that practice is enabled where required.
8. Browser controls
Most browsers permit users to view, delete, or block cookies. Browser controls may affect all sites and can prevent BOMSync authentication or other essential functionality if strictly necessary cookies are blocked.
Browser settings do not replace BOMSync's consent mechanism where applicable law requires BOMSync to obtain consent itself.
9. Changes
BOMSync may update this Policy as technology or legal requirements change. The current effective date appears at the top of this page. Superseded versions will be identified through the Legal Archive.
10. Contact
Questions about cookies or privacy may be sent to:
privacy@bomsync.com