Cookie Policy

A cookie is a small piece of data a website stores in your browser. Local storage and session storage work similarly, but persist differently and aren't sent to a server automatically the way cookies are. We use all three in a limited way — details below.

• Strictly necessary — required for the platform to function, such as keeping you signed in or protecting against abuse. These can't be switched off.
• Preferences — remember choices you've made, such as interface settings.
• Analytics — would help us understand how the platform is used in aggregate.
• Marketing — would be used to personalise or measure advertising.

As it stands, Billy Atlas has no analytics tool, no advertising pixel and no marketing tracker installed. The preferences category is limited to interface settings. The analytics and marketing categories exist in our consent framework so that if a tool is ever added in future, it stays switched off by default and only runs once you actively turn that category on.

Below this policy, we render a live, itemised table of every cookie and stored value currently in use, pulled directly from the product's own tracker registry. That means this table can never describe something that isn't actually installed — it reflects the real state of the code, not a static list that goes stale.

Nothing optional runs before you make a choice. When you first visit, you can accept or reject non-essential categories — rejecting is one click, exactly as easy as accepting. Your choice is recorded in a local storage record called billy_consent, tagged with the version of this policy you consented under.

You can change your mind at any time using "Cookie settings" in the footer of the site. Withdrawing consent takes effect immediately for anything going forward.

Most browsers let you block or delete cookies and stored data directly. If you block strictly necessary storage, core features will break — for example, you won't be able to stay signed in, and abuse-protection checks may fail, which can prevent you from using the platform at all.

Not everything we use is a cookie. We store your authentication session and your interface preferences in local storage, which persists until you clear it or sign out. We use session storage for a short-lived Instagram authorisation state value, created only when you start connecting an Instagram account, and it exists purely to verify that the authorisation flow wasn't tampered with — it's discarded once the connection completes or the browser session ends.

We use a cookie for security and abuse protection — helping us detect and prevent malicious activity such as automated attacks. This is strictly necessary and can't be disabled while using the platform.

If you connect Instagram, or view a creator profile that displays imported Instagram media, that content is served from our own servers using data Meta's API provided — it isn't a live embed that sets its own third-party cookies in your browser.

Your consent record persists in local storage until you clear your browser data, use a different device or browser, or change your choice via Cookie settings.

If we materially change what we use cookies or stored values for — such as adding an analytics or marketing tool — we'll update this policy and ask for your consent again rather than relying on an earlier choice. The version in effect is dated [LAST UPDATED DATE TO BE CONFIRMED] (originally effective [EFFECTIVE DATE TO BE CONFIRMED]).

Questions about this policy or how we handle cookies and stored data can be sent to support@billyatlas.com.