Cookies Policy
The cookies we use, why we use them, and how to manage your preferences. We use strictly necessary cookies only — no advertising, no behavioural tracking, no third-party marketing.
Introduction
This Cookies Policy explains how BentBox (operated by Haas & Reed B.V., "BentBox", "we", "us") uses cookies and similar technologies on the BentBox website at bentbox.co, its subdomains, and the BentBox service (together, the "BentBox Service").
It complements our Privacy Policy, which sets out how we process your personal data more generally. Read the two together for the full picture.
The short version
BentBox uses cookies only to make the service work properly and to understand how the service is being used so we can improve it. We do not use advertising cookies, we do not allow third-party marketing trackers, and we do not sell or share data collected via cookies for marketing.
What Are Cookies?
Cookies are small text files that a website places on your device when you visit it. They allow the website to recognise your device on a future visit, remember things like your preferences, and operate basic functionality such as logging you in.
In this Policy we use the term "cookies" to cover a range of similar technologies, including:
- HTTP cookies — the classic small text files stored by your browser.
- Web storage — local storage and session storage available to your browser.
- Pixel tags — small transparent images used to detect that a page or email has been viewed.
- Mobile device identifiers — used by mobile apps to recognise a device across sessions.
Cookies are usually categorised in two ways:
By duration
- Session cookies are deleted automatically when you close your browser.
- Persistent cookies remain on your device for a defined period or until you delete them.
By origin
- First-party cookies are set by the website you are visiting — in this case, BentBox.
- Third-party cookies are set by another organisation through the website you are visiting.
For general background on cookies you can also visit allaboutcookies.org or youronlinechoices.eu.
Legal Basis
The use of cookies on the BentBox Service is governed by:
- The UK Privacy and Electronic Communications Regulations 2003 (PECR), as amended, for users in the United Kingdom;
- The ePrivacy Directive (2002/58/EC) as implemented in EU Member State law, for users in the European Economic Area;
- The UK GDPR and EU GDPR, where cookies process personal data.
Under these rules, cookies that are strictly necessary to deliver a service you have explicitly requested can be set without your prior consent. All other cookies — including analytics cookies — require your prior consent, which you can withdraw at any time.
Where we rely on consent, we ask for it via our cookie banner before non-essential cookies are set.
Cookies We Use
The table below lists the cookies set by BentBox, their purpose, duration, and the legal basis on which we set them.
Strictly Necessary Cookies
These cookies are essential for the BentBox Service to function. They cannot be disabled without breaking core functionality such as login, security, and basic browsing. No consent is required for these cookies under PECR.
| Name | Purpose | Duration | Type |
|---|---|---|---|
accessToken |
Keeps you signed in to your BentBox account. Set as HttpOnly so it cannot be read by client-side scripts, for security. | Session / up to 30 days if "remember me" is selected | First-party, strictly necessary |
PHPSESSID |
Standard PHP session identifier. Maintains your session state across page loads. | Session | First-party, strictly necessary |
csrf_token |
Cross-site request forgery protection. Pairs with a hidden form field to ensure requests come from the BentBox site, not a malicious third party. | Session | First-party, strictly necessary |
myReferralCode |
Remembers your referral code so we can credit referrals correctly. | 30 days | First-party, strictly necessary |
age_verified_at / age_verified_state |
Records the timestamp and jurisdiction of your most recent age verification, so we can comply with regional age verification laws (including UK Online Safety Act, Tennessee SB 1792, and Ohio) without asking you to re-verify on every visit. | Up to 30 days, shorter for states that require frequent re-verification (for example, 60 minutes in Tennessee) | First-party, strictly necessary |
cookie_consent |
Records your cookie preferences so we don't ask again on every page. | 12 months | First-party, strictly necessary |
Analytics Cookies
We use Google Analytics 4 to understand how the BentBox Service is used, so we can improve it. These cookies require your consent and can be declined or withdrawn at any time via our cookie banner.
We have configured Google Analytics with IP anonymisation enabled and we have disabled advertising features. We do not combine Google Analytics data with advertising data and we do not use the data for behavioural targeting.
| Name | Purpose | Duration | Type |
|---|---|---|---|
_ga |
Google Analytics: distinguishes unique users by assigning a pseudonymous client identifier. | 2 years | First-party (set on the bentbox.co domain), analytics |
_ga_WKXT0L648M |
Google Analytics 4: maintains the session and tracks page views within this BentBox property (measurement ID G-WKXT0L648M). | 2 years | First-party, analytics |
Google, as the provider of Google Analytics, acts as our data processor for this analytics data. Google's own data practices are described in the Google Privacy Policy.
You can also opt out of Google Analytics entirely across all websites by installing the Google Analytics Opt-out Browser Add-on.
What We Don't Do
Things you won't find on BentBox
- No advertising cookies. BentBox does not display advertising and does not set or allow advertising cookies.
- No behavioural tracking. We do not build behavioural profiles of you across sessions for marketing.
- No cross-site tracking. We do not track your activity on other sites and we do not allow third-party trackers to do so through the BentBox Service.
- No data sales. We do not sell or share cookie data with third parties for marketing.
- No social media tracking pixels. Pages on the BentBox Service do not embed Meta Pixel, TikTok Pixel, X tracking pixels, or equivalent.
How to Manage Your Cookie Preferences
On BentBox
The first time you visit the BentBox Service we ask you to choose whether you accept analytics cookies. You can change your choice at any time by clicking "Cookie Preferences" in the footer of any page, or by clearing the cookie_consent cookie in your browser.
If you decline analytics cookies, you can still use the full BentBox Service. Only strictly necessary cookies will be set.
In Your Browser
Most browsers let you view, manage, and delete cookies, and configure whether and when cookies are accepted. Settings are usually in the privacy or security section of your browser's preferences. Useful guides:
If you block all cookies, including strictly necessary ones, parts of the BentBox Service — including login — will not work.
Other Tools
For broader control over tracking across multiple websites, you can also explore youronlinechoices.eu and allaboutcookies.org.
Changes to This Policy
We may update this Cookies Policy from time to time to reflect changes in the cookies we use, the BentBox Service, or applicable law. When we make a material change, we will update the "Last Updated" date at the top of this Policy and, where the change affects the cookies that require your consent, we will ask for your consent again through the cookie banner.
How to Contact Us
If you have any questions about this Cookies Policy or about how BentBox uses cookies, please contact us:
Get in Touch
Email: privacy@bentbox.co
Postal address:
Haas & Reed B.V.
Mantelmeeuwhof 15
3582 DN, Utrecht
The Netherlands
Related Resources
Last Updated: 29/05/2026 | Version 2.0 | Print This Policy