Cookie Notice

BuzzAgent Ltd

This notice says what BuzzAgent stores on your device when you use buzzagent.co, why, and for how long. It covers our website, the dashboard businesses sign in to, and the pages a guest opens from a venue's BuzzPad: the venue's page, the guest card, a Google Wallet pass's page and Your cards. Our Privacy Policy and our Guest Privacy Notice say what we do with personal data.

1. Who we are

BuzzAgent Ltd ("BuzzAgent", "we", "us", "our") is a company registered in England and Wales under company number 16562822, with its registered office at 86-90 Paul Street, London, EC2A 4NE, United Kingdom.

If you have a question about this notice, email us at hi@buzzagent.co.

2. Why we show no cookie banner

Everything we store on your device either does something you asked for or remembers a choice you made. Neither needs your consent under the Privacy and Electronic Communications Regulations, so we show no cookie banner and ask for no consent. We set no advertising or marketing cookies, we do not track you across other websites, and we do not sell or share this data for advertising.

3. What keeps things working

These are strictly necessary: each does something you asked for, which the service cannot do without it.

Your sign-in. Cookies whose names begin sb-, set by Supabase, our sign-in provider, keep you signed in. They go when you sign out, and otherwise last up to 400 days.
Your browser. ba_browser holds a random identifier for your browser. It makes a code we text you work only in the browser that asked for it, lets us remember the browsers that signed in to your account so that a new one brings you an email, and makes a link to replace a lost mobile work only in the browser that asked for it. 400 days.
An invitation. ba_staff_invitation carries an invitation to BuzzAgent's own team until you join, for up to 7 days, and ba_org_invitation an invitation to a business's team, for up to 24 hours.
Joining a team. ba_org_joined lets the page you land on after joining a team say what your joining came to. 10 minutes.
A confirmed email. email-confirmed lets the next page tell you your email address is confirmed. 5 minutes.
Your guest card. ba_guest holds a random marker by which your browser finds its guest cards. We set it only when you act - a tap for a treat or a card, opening a card from Google Wallet, asking for a code to save or bring back your cards, or bringing them back - and never when you only view a page. We read it only for your own cards and for a code you asked for. 400 days.

4. What remembers your choices

These remember a choice you made, and fall under the preference exception introduced by the Data (Use and Access) Act 2025. Everything keeps working if you clear them.

Your default workspace. buzzagent_default_org remembers which workspace opens first in the dashboard. 365 days.
The dashboard's sidebar. sidebar_state remembers whether the sidebar is open. 7 days.
Light or dark. If you pick light or dark mode, your browser's own storage keeps it under theme until you clear it.
Passkey sign-in. Three entries in your browser's own storage: lumman.auth.last-sign-in-route remembers that this device last signed in with a passkey, so a passkey is offered first; lumman.auth.no-passkey-here that this device holds no passkey for us, so it is not asked again; and lumman.auth.passkey-offer-dismissed that you added a passkey on this device. They stay until you clear them.

5. Measurement

We measure traffic and page performance with analytics that set no cookies and no browser storage. They report aggregate figures such as page views and load times, plus two named events: one recording that a visit arrived from an AI search tool, and one recording that an automated crawler fetched our robots file. We do not profile you, and this data is never combined with advertising.

6. Meta's sign-up on one dashboard page

When a business connects its WhatsApp Business Account, that page in the signed-in dashboard loads Meta's JavaScript SDK, which Meta requires for its sign-up flow. The SDK sets its own cookies and browser storage on our domain, which its sign-up flow needs in order to work; what Meta does with them is governed by Meta's terms and privacy policy. We have turned off its automatic event logging. The SDK loads on that page only, never on our public website or a venue's pages.

7. Clearing what we store

You can clear any of these in your browser's settings at any time, free of charge. Clearing the sign-in cookies signs you out. Clearing ba_guest takes your guest cards out of that browser, and saved ones come back when you confirm your mobile number again. Clearing an invitation means opening its link again. Clearing a choice returns it to its default.

8. Changes to this notice

We may update this notice from time to time. We will post the updated version here, and the date shown at the top of this page changes with it.

9. Contact

BuzzAgent Ltd 86-90 Paul Street, London, EC2A 4NE, United Kingdom Email: hi@buzzagent.co