Cookie Policy
Last Updated: October 13, 2026
Cookies are small text files a website stores in your browser. Local storage is a similar browser store that holds data on your device. This page lists what we use on bike4mind.com and on app.bike4mind.com, and how to control it.
The marketing site: bike4mind.com
| Name | Purpose | Category | Lifetime | Set by |
|---|---|---|---|---|
| b4m-region (cookie) | Records whether you are in a region that needs opt-in consent (eu) or not (row). The app reads it. | Strictly necessary | 12 hours | Bike4Mind |
| b4m-consent-decision (cookie) | Records that you granted or denied consent, so app.bike4mind.com can use the same choice. | Necessary | 180 days | Bike4Mind |
| b4m-consent (local storage) | Stores your choice for each category. | Necessary | Until you clear it | Bike4Mind |
| b4m-first-touch (cookie) | Remembers the source, medium, campaign, referrer and landing page of your first visit, to attribute a sign-up. | Marketing | 90 days | Bike4Mind |
| b4m-launch-flag-dismissed-* (local storage) | Remembers that you closed a banner. | Preferences | Until you clear it | Bike4Mind |
| b4m-locale-suggestion-answered (local storage) | Remembers your answer to the language offer. | Preferences | Until you clear it | Bike4Mind |
| _ga, _ga_* (cookies) | Google Analytics 4 measures how the site is used. | Analytics | Set by Google | |
| Reddit pixel | Measures ad performance and builds retargeting audiences. | Marketing | Set by Reddit | |
| Meta pixel | Measures ad performance and builds retargeting audiences. | Marketing | Set by Meta | Meta |
Google Analytics, the Reddit pixel and the Meta pixel load only on our production site, and never for automated traffic.
Our /manifesto page embeds YouTube with the privacy-enhanced domain (youtube-nocookie.com), as does /bicycle-for-the-mind, so an embed sets no cookies until you play it. Our fonts are self-hosted. The analytics on our MCP endpoint are server-side and use no cookies, as described in our Privacy Policy.
The app: app.bike4mind.com
| Name | Purpose | Category | Lifetime | Set by |
|---|---|---|---|---|
| b4m_rt (cookie, HttpOnly) | Keeps you signed in with a session refresh token. | Strictly necessary | 30 days, renewed as you use the app | Bike4Mind |
| b4m_td (cookie) | Lets a device you trust sign in again without a new verification step. | Necessary (security) | 30 days | Bike4Mind |
| b4m_oauth_nonce*, b4m_okta_pkce (cookies) | Protect the sign-in flow while you sign in. | Strictly necessary | 10 minutes | Bike4Mind |
| b4m_pg_<id> (cookie) | Unlocks a passphrase-protected shared item after you enter the passphrase. | Necessary | 2 hours | Bike4Mind |
| b4m_consent (cookie), cookie_consent (local storage) | Store your cookie choice. | Necessary | 90 days (cookie) | Bike4Mind |
| b4m_vid (cookie) | A visit ID for our own visit analytics. | Analytics | 30 minutes | Bike4Mind |
| b4m_utm, b4m_last_touch, b4m_app_first_touch (cookies) | Campaign attribution: which campaign or visit led you to sign up. | Marketing | 30 minutes, 30 days and 90 days | Bike4Mind |
| App preferences (local storage) | Your settings, drafts and interface state. | Preferences | Until you clear it | Bike4Mind |
| Google Analytics | Measures how the app is used. | Analytics | Set by Google | |
| Reddit and Meta pixels | Measure ad performance, after you consent. | Marketing | Set by each vendor | Reddit, Meta |
| Stripe.js | Takes payment on checkout and helps prevent fraud. | Necessary to pay | Set by Stripe | Stripe |
| Google sign-in | Lets you sign in with your Google account. | Necessary to use it | Set by Google |
The campaign attribution cookies are set only with your consent and are cleared if you decline. The b4m_vid visit ID supports our own first-party visit analytics.
How consent works
In the EEA, the UK, Switzerland, Iceland, Liechtenstein and Norway, and when we cannot tell where you are, analytics and marketing stay off until you opt in. The banner on bike4mind.com offers Accept all, Reject all, and Customize, with a toggle for each category.
Everywhere else, analytics and marketing are on by default. You can turn them off at any time.
Necessary cookies and local storage are always on. The site and the app cannot work without them.
How to change your choice
On bike4mind.com, open "Cookie settings" in the site footer and change any category.
On app.bike4mind.com, the banner offers Accept and Decline only. You can change your choice under "Cookie settings" in the app.
You can also clear cookies and local storage in your browser settings. You will then be asked again where consent is required.
Third parties
Cookies set by Google, Reddit, Meta, Stripe and other third parties are governed by those companies' own policies. The exact names of third-party cookies can change without notice, so the tables above name the vendor and not every cookie.
Contact
Questions about this page? Email legal@bike4mind.com.