Cookies and Tracking

Last updated: September 2, 2026

Short version: this website uses one analytics cookie, from Google Analytics. Whether it waits for your permission depends on where you are, and the section below says exactly how. Nothing here follows you between sites. Two other things write to your browser, both of them the site doing its job rather than anybody watching, and all three are named below.

Cookies on this website

• An invitation cookie, named bht_ref, and only if you arrive through somebody’s invite link. It holds the eight character invite code so the person who invited you gets credit when you sign up, it lasts 90 days, and it is readable only by our server rather than by any script on the page. It contains nothing about you.

It is not used to profile you and it is not shared with anybody. There is no advertising cookie. The one analytics cookie is described in the next section.

What this website keeps in your browser

Four things, and this is the whole list. None of them is a cookie, so none of them is sent to us on every request. They sit in your browser’s own storage and you can clear them from its settings at any time.

• bh_cookie_consent, in local storage. Your answer to the analytics question, so we stop asking. It holds one word.
• bh_portal, in local storage. Your sign-in for the support bubble and the careers form, if you use either. It is cleared when you sign out.
• bh_sso_n, in session storage. A random value that lasts one sign-in, so a link somebody else made cannot sign you into their account. It is thrown away the moment you come back, and session storage empties when you close the tab.

The app at buhata.com/app keeps more than this, because it has to work with no internet at all. That is the section below.

Our hosting provider, Cloudflare, may also set a short-lived cookie of its own to tell human visitors from automated traffic. That is a security measure rather than a choice we make, and it carries no advertising identifier.

Storage inside the app

The app is a different matter, and the storage it uses is the app working rather than anybody watching. It keeps your data on your device so Buhata runs with no internet at all, and it keeps a sign-in token so you are not asked for your password every time you open it. Signing out removes the token. Deleting the app removes the rest.

None of that is used to profile you, none of it is shared, and there is no identifier in it that follows you to any other website, because Buhata is not on any other website.

What we measure

Google Analytics, on this website only, added in September 2026 so we can see which pages get read and which get abandoned. When it runs, it sets a cookie that tells pages of this site apart from each other and sends Google the page you viewed with your IP address shortened. It does not run inside the Buhata app, on the share pages, or on the invite pages. There is still no session recorder, no heatmap, no advertising pixel, and no attribution tag.

Whether it asks first depends on where you are, which we read from your connection. In the European Union, the wider European Economic Area, the United Kingdom, Switzerland, Brazil, South Korea, Japan, Canada, South Africa and Turkey, it is off until you accept the cookie notice, and if you decline, nothing from Google is loaded at all. In California it is on when the page opens, a notice says so, and the switch in that notice turns it off. Everywhere else it is on without a notice, because the law there does not ask us to interrupt you for one analytics cookie. Wherever you are, your answer is remembered so you are not asked again, and the Cookies link in the footer lets you change it at any time. If we cannot tell where you are, you get the asking version.

The one request that leaves our servers

These pages load two typefaces, and both files are served from buhata.com. They used to come from Google Fonts, which meant your browser asked Google for them and Google saw the address it came from. That request is gone: the font files sit on our own server now, so nothing on this site reaches a third party, and there is no longer a banner asking you about it. If you answered that banner in the past, the one word it saved in your browser is still there and is read by nothing.

Other companies involved

The full list of companies that touch anything, and what each one gets, is in the Privacy Policy rather than repeated here, so there is one list to keep honest instead of two.

Do Not Track

We honor it by not tracking anybody in the first place.

Contact

Questions or requests: info@buhata.com.

Buhata LLC, United States. Our full postal address is in the Terms.