Cookie Policy

Legal · Bioscope Foundry, LLC (a Delaware limited liability company) · Effective date: June 23, 2026 · Last updated: June 23, 2026

Draft for legal review. Cookie inventories evolve with the product; verify before publication. confirmation.

This Cookie Policy explains how Bioscope Foundry, LLC (“Foundry,” “we,” “us,” or “our”) uses cookies and similar technologies. Foundry operates two environments with different cookie practices: the public marketing site (bioscopefoundry.com) and the authenticated operating platform for member practices. We do not use third-party advertising or behavioral-tracking cookies anywhere.

Two environments, two practices

Marketing site (`bioscopefoundry.com`)

Public, informational. Uses essential cookies for site functionality and security, plus privacy-respecting analytics to understand how the site is used. Does not process PHI.

Operating platform

Authenticated tools for member practices. Uses only essential cookies: security, authentication, and session. No analytics, no marketing, no third-party trackers.

1. What cookies are

Cookies are small text files stored on your device when you visit a website. They allow a site to remember your actions across pages and visits, and they support security (for example, detecting tampered sessions). Similar technologies include local storage, session storage, and web beacons; this policy treats them together.

2. Cookies on the marketing site

The marketing site uses two categories of cookies.

2.1 Essential cookies

Required for the site to function and to remain secure. These cannot be disabled without breaking the site.

Name	Purpose	Duration	Provider
`__cf_bm`	Cloudflare bot management: distinguishes humans from bots.	30 minutes	Cloudflare
`cf_clearance`	Cloudflare security verification.	1 year	Cloudflare
`CookieConsent`	Stores your cookie consent choices.	1 year	Bioscope Foundry
`bf_session`	Short-lived session identifier for form submissions and waitlist flow.	Session	Bioscope Foundry

2.2 Analytics cookies

Used to understand how the site is performing in aggregate (page views, referrers, broad usage patterns). Where required by law, we ask for your consent before setting analytics cookies; you can withdraw consent at any time.

Name	Purpose	Duration	Provider

We do not use advertising or cross-site behavioral tracking pixels (no LinkedIn Insight Tag, no Facebook Pixel, no Google Ads remarketing). Analytics tooling is being finalized; any measurement will be privacy-respecting, and this policy will be updated before any analytics cookie is set.

3. Cookies on the operating platform

The authenticated operating platform uses only strictly necessary cookies. These maintain authenticated sessions, secure form submissions, and enforce HIPAA-relevant session timeouts.

Name	Purpose	Duration	Flags
`bf_auth`	Encrypted authentication session identifier.	Session (idle timeout 30 minutes, absolute 24 hours)	HttpOnly, Secure, SameSite=Lax
`bf_csrf`	Cross-site request forgery protection token.	Session	Secure, SameSite=Strict
`bf_device`	Device identifier for anomaly detection and risk-based authentication.	Persistent	HttpOnly, Secure

No analytics, no marketing, no third-party trackers on the operating platform. This restriction is intentional and is part of how we protect PHI. Blocking strictly-necessary cookies will prevent sign-in.

4. What we never use

Third-party advertising cookies (no Google Ads, no LinkedIn Ads, no Meta Pixel, no TikTok Pixel).
Cross-site behavioral tracking or fingerprinting.
“Sale” or “sharing” of personal information for cross-context behavioral advertising under California, Colorado, or Virginia consumer-privacy laws.
Tracking cookies, pixels, or session-replay tools on the operating platform.

5. Your choices

Marketing site consent. We present a cookie banner on bioscopefoundry.com that lets you accept or reject non-essential cookies and change your preferences later. Non-essential cookies are off by default until you opt in.
Browser controls. Most browsers let you view, delete, or block cookies; check your browser’s privacy settings. Note that blocking essential cookies will break sign-in to the operating platform.
Global Privacy Control (GPC). When your browser or extension sends a Global Privacy Control signal, we treat it as a valid opt-out request under California Code of Regulations title 11, § 7025. Because we do not sell or share personal information for cross-context behavioral advertising, the GPC signal does not change which cookies we set, but it is recorded against your visit as an opt-out preference for any future change to that practice and is honored across the marketing site.
Do Not Track signals. DNT is treated as informational only. GPC (above) is the signal we honor as an opt-out. Both are recorded; the GPC determination governs.
Privacy rights. See our Privacy Policy for additional rights and how to exercise them.

6. Changes to this Cookie Policy

We may update this policy from time to time. We will post the revised version here and update the “Last updated” date.

7. Contact

Bioscope Foundry, LLC
Privacy: privacy@bioscopefoundry.com
11939 N. Meridian Street, Suite 125, Carmel, IN 46032

Related: Privacy Policy · HIPAA Notice.