Cookie Policy
Last updated: 2026-05-04
1. What Are Cookies?
Cookies are small text files that are placed on your device when you visit a website. They are widely used to make websites work more efficiently and to provide information to the site owners.
This policy explains how Crul.Dev, trading as BuiltSign (KVK 97533114) ("we", "our", or "us") uses cookies and similar tracking technologies on our website and services.
2. Legal Basis for Cookies
Under EU law (GDPR Article 6 and the ePrivacy Directive), we use different legal bases depending on the type of cookie:
- Essential cookies: Processed based on our legitimate interest (Article 6(1)(f) GDPR) in providing a secure and functional service. These are strictly necessary and do not require consent.
- Analytics cookies: Require your explicit consent (Article 6(1)(a) GDPR) before being placed. You can accept or reject these via our cookie banner.
- Functional cookies: Based on consent for non-essential functions, or legitimate interest where they improve your experience without tracking you.
In accordance with the ePrivacy Directive (Telecommunicatiewet in The Netherlands), we will not place non-essential cookies without your prior consent.
3. Types of Cookies We Use
Essential Cookies
These cookies are necessary for the website to function properly. They enable core functionality such as security, authentication, and session management. You cannot opt out of these cookies as they are strictly necessary.
| Cookie | Purpose | Duration |
|---|---|---|
| session_id | User authentication | Session |
| csrf_token | Security (CSRF protection) | Session |
| theme | User preference (dark/light mode) | 1 year |
Analytics Cookies
BuiltSign uses Vercel Analytics, a privacy-friendly analytics tool that operates server-side. No tracking cookies or persistent identifiers are placed on your device. Vercel Analytics therefore does not fall under the consent requirement of the ePrivacy Directive.
| Cookie | Purpose | Duration |
|---|---|---|
| — | Vercel Analytics — server-side processing, no cookie placed on your device | N/A |
Functional Cookies
These cookies enable enhanced functionality and personalization, such as remembering your preferences and settings.
| Cookie | Purpose | Duration |
|---|---|---|
| language | Language preference | 1 year |
| bs_consent | Cookie preferences (bs_consent) | 180 days |
4. Third-Party Cookies
Some cookies are placed by third-party services that appear on our pages. We use the following third-party services:
- Supabase: Authentication and database services (US/EU)
- Stripe: Payment processing and fraud prevention (US/IE)
- Vercel: Serverless hosting, frontend delivery, and privacy-friendly server-side analytics (no cookies placed on your device)
- Resend: Transactional email delivery (invitations, reminders). Emails may contain a tracking pixel for delivery confirmation. You can disable loading of external images via your email client settings.
Third parties set their own data retention periods. Stripe processes payment data in accordance with PCI-DSS requirements; Supabase and AWS store your account data under their respective data processing agreements.
These third parties may set their own cookies and have their own privacy policies. We encourage you to review their respective policies for more information about their data practices.
5. Managing Cookies
You can control and manage cookies in several ways:
Browser Settings
Most browsers allow you to refuse or accept cookies, delete existing cookies, and set preferences for certain websites. Here are links to cookie management guides for popular browsers:
Cookie Consent
When you first visit our website, you will see a cookie consent banner. You can choose to accept or reject non-essential cookies. You can change your preferences at any time through our cookie settings.
6. Impact of Disabling Cookies
If you choose to disable cookies, please be aware that:
- Some features of the website may not function properly
- You may need to re-enter information on each visit
- Personalization features may not work as expected
- You will still see the cookie consent banner on each visit
7. Do Not Track Signals
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. We currently respond to DNT signals by disabling analytics cookies when detected.
8. Your Rights
Under GDPR and Dutch law, you have specific rights regarding cookies and tracking technologies:
- Right to withdraw consent: You can withdraw your consent for non-essential cookies at any time via our cookie settings or by clearing cookies in your browser.
- Right to access: You can request information about which cookies we have placed and what data they contain.
- Right to erasure: You can delete cookies at any time through your browser settings.
- Right to complain: If you believe we are handling cookies unlawfully, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at https://autoriteitpersoonsgegevens.nl.
For more information about your privacy rights, please see our Privacy Policy.
9. Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in technology, legislation, or our data practices. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Material changes to cookies requiring consent will prompt a new consent request.
10. Contact Us
If you have questions about our use of cookies, please contact us:
- Email: legal@builtsign.com
- Crul.Dev (trading as BuiltSign)
- Zwedenstraat 37, Almere, The Netherlands
- KVK: 97533114
- VAT: NL005276049