In brief. We use only essential cookies, to sign you in and protect your session, and your browser’s local storage, to remember display preferences. There are no advertising cookies, no analytics cookies and no tracking across other websites, so there is no cookie banner to click through.
1. Cookies and local storage
Cookies are small text files a website asks your browser to keep and send back on later visits. Local storage, session storage and the cache are similar places in your browser where a website can keep small amounts of data, such as a setting, on your device. This policy explains how bmsprime.com, the BMS portal and the BMS apps use them. It forms part of our Privacy Policy.
2. Essential cookies we set
These cookies are strictly necessary for the Service to work securely. They are set by bmsprime.com only (first-party), contain no advertising identifiers, and cannot be switched off without breaking sign-in.
| Cookie | Purpose | Duration |
|---|---|---|
Session cookie (name ends in _session) | Keeps you signed in as you move between pages and links your requests to your session. Marked HttpOnly, so page scripts cannot read it. | Ends when you sign out or the session times out |
XSRF-TOKEN | Protects you against cross-site request forgery: it proves that a change came from the BMS portal and not from another website. | Same as the session |
| Remember-me cookie (only if offered and chosen at sign-in) | Keeps you signed in on a trusted device. | Until you sign out |
Visitors who only read the public website and do not sign in may still receive the session and XSRF-TOKEN cookies, because the same server runs the portal. They are not used to identify or track you.
3. Preferences kept in local storage
The portal keeps a few preferences in your browser’s local storage so that it looks and behaves the way you left it, for example:
- light or dark theme and animation level;
- dashboard cards you have hidden, and the temperature unit for the weather card;
- whether you dismissed the “install the app” prompt;
- the time of your last activity, so that an idle session can be closed safely.
These values stay on your device and are not used for advertising or tracking. Session storage is used in the same way for things that only matter while a tab is open.
4. Offline cache
When you use the portal in a browser or install it as an app, a service worker keeps a copy of the portal’s program files (scripts, styles, icons) in the browser cache, so that it opens quickly and copes with a weak connection. Business data from the portal is never stored in this cache; it always comes live from our servers.
5. Third-party content
Our pages load fonts from Google Fonts, and the portal loads some open-source libraries from public content delivery networks (jsDelivr and cdnjs). To deliver these files, those providers receive your IP address and browser details, as with any web request. We do not use them to set advertising or analytics cookies. Google describes its handling of Fonts requests in its own privacy policy.
We do not use Google Analytics, advertising pixels, social media trackers or similar tools.
6. Your choices
You can delete cookies and site data, or block them, in your browser settings. If you block essential cookies, you can still read our public website, but you will not be able to sign in to the portal. Clearing local storage resets your display preferences. In the BMS apps, clearing the app’s storage in your device settings has the same effect.
7. Changes and contact
If we ever introduce non-essential cookies, we will update this policy first and ask for your consent where the law requires it. Questions: info@bmsprime.com.
Last updated: 22 October 2026.