Legal
Cookie Policy
Which cookies and similar storage bushido uses, who receives them, and how long they last.
Necessary cookies stay on so you can sign in and so we can remember this choice. Analytics and marketing storage load only after you allow them on the banner. You can change that choice here at any time. See the Privacy Policy.
| Vendor | Category | Purpose | Cookie names | Retention | Processor |
|---|---|---|---|---|---|
| Sign-in session | necessary | Keeps you signed in. The cookie holds an opaque session id, not your password. | next-auth.session-token, or __Secure-next-auth.session-token on https. Staging adds a .staging suffix so it cannot collide with production. | 30 days, renewed while you use the site (NextAuth's default for a database session). | bushido (first-party) |
| First-paint sign-in hint | necessary | A non-sensitive hint so the signed-in shell can paint before the session check returns. It is not an access token. | bushido_auth | 30 days, or cleared when you sign out. | bushido (first-party) |
| Consent choice | necessary | Stores the analytics and marketing choice you made, the policy version, an anonymous id, and a do-not-sell flag, so we do not ask on every page and so optional tags stay off until you allow them. | bushido_consent | 1 year. | bushido (first-party) |
| New Relic | analytics | Error and performance monitoring for bushido.is. Loaded only after you allow analytics cookies, and only on www.bushido.is. Session replay and session trace are disabled in our configuration. | No cookie. The agent keeps a session id in browser storage under NRBA_SESSION. | The agent expires that session after 4 hours, or after 30 minutes without activity. | New Relic (US transfer) |
| Plausible | analytics | Cookieless page counts. Plausible does not set a cookie and does not store an IP address. Loaded only after you allow analytics. | None. | No browser identifier. Plausible computes a daily-reset value on its own servers in the EU. | Plausible (EU) |
| Vercel Analytics | analytics | Aggregated page views. Vercel identifies a browser with a hash of the request, not a cookie, and resets that hash every day. Loaded only after you allow analytics. | None. | The visitor hash lasts one day and is not reused across sites. | Vercel (US transfer) |
| Vercel Speed Insights | analytics | Anonymous Web Vitals (loading speed). Vercel states that these points are not tied to a person or an IP address and cannot rebuild a browsing session. Loaded only after you allow analytics. | None. | Aggregated performance points, not a visitor profile. | Vercel (US transfer) |
| Google tag | marketing | Google Ads conversion measurement (AW-17811160874) and GA4 (G-YT40SH8VFF). Loaded only after you allow marketing cookies. | _ga and _ga_G-YT40SH8VFF (about 2 years), _gcl_au (about 90 days). Google may set further ads cookies; their current list is at business.safety.google/adscookies. | As published by Google for each cookie name, commonly 90 days to 2 years. | Google (US transfer) |
| Meta SDK | marketing | Loads the Meta JavaScript SDK and logs a page view for ads measurement. Loaded only after you allow marketing cookies. | The SDK is initialised with cookies enabled. Meta commonly sets _fbp for about 3 months. | About 3 months for _fbp, per Meta's published cookie description. | Meta (US transfer) |
| Mux | necessary | Streams video and audio you press play on. Playback requests go to Mux. This row is not the analytics tags above. | None set by bushido for playback. | A playback request lasts for that view. It is not a tracking cookie. | Mux (US transfer) |
| Mux Data | analytics | Measures playback quality (start-up time, buffering, errors). Runs only after you allow analytics; without that the player sends no Mux Data beacons and sets no cookie. | muxData, a first-party cookie holding a random viewer id and session markers. It cannot be read on other Mux customers' sites. | 1 year. | Mux (US transfer) |