BlushQuestBlushQuest

Cookie Policy

Last Updated: May 29, 2026

This Cookie Policy explains how BlushQuest ("we," "us," or "our") uses cookies and similar technologies on our website (blushquest.com). This policy should be read alongside our Privacy Policy.

1. What Are Cookies?

Cookies are small text files that are stored on your device (computer, tablet, or mobile) when you visit a website. They help websites remember information about your visit, which can make your next visit easier and the site more useful to you.

2. How We Use Cookies on Our Website

Our website (blushquest.com) uses cookies for analytics, basic site functionality, and a limited A/B test of marketing copy. We do not use cookies for advertising or cross-site behavioral tracking. Note: Our mobile application does not use cookies; it uses secure local storage for session management.

Your choice (consent banner): The first time you visit, a banner lets you Accept or Decline analytics cookies. Analytics tags load through Google Consent Mode v2, which means no analytics cookies (Google Analytics or the bq_voice A/B cookie) are set until you accept. In the EU, EEA, UK, and Switzerland analytics defaults to denied until you opt in; elsewhere it defaults to on with the option to decline. Essential cookies are always active. You can change your decision at any time by clearing the bq_consent cookie (or all cookies) in your browser, which makes the banner appear again on your next visit.

3. Types of Cookies We Use

Functional / A/B Testing Cookie (first-party)

We run a lightweight A/B test on the marketing site to evaluate two creative variants of our messaging. The cookie below is set by our own edge middleware and is not shared with any third-party advertiser.

  • bq_voice: First-party analytics A/B cookie set by our Vercel Edge Middleware. Possible values: a or b. Purpose: assigns you to one of two creative variants so we can compare engagement. Lifetime: 30 days. SameSite=Lax; not HttpOnly so that client-side scripts (Google Tag Manager) can read the value and attach it to analytics events. Because it is non-essential, it is only set after you accept analytics (and is not set at all where analytics defaults to denied until you opt in). Not used for advertising and not shared with third parties.

Tag Management (Google Tag Manager)

We use Google Tag Manager (container GTM-KF5TW3PD) to load and manage measurement tags on the marketing site. Tag Manager itself does not collect personal data about you — it is the loader that fires the analytics tag (Google Analytics 4).

  • _gtm_* / GTM operational storage: Used internally by Tag Manager to coordinate tag loading and consent state. Typically session-scoped or short-lived.

Analytics Cookies (Google Analytics 4)

We use Google Analytics 4 (measurement ID G-38CRBBSBES) to understand how visitors interact with our website. IP anonymization is enabled. We do not use Google Analytics for advertising or remarketing.

Cookies set:

  • _ga: Distinguishes unique users. Lifetime: up to 24 months.
  • _ga_<container_id> (specifically _ga_38CRBBSBES): Persists session state for Google Analytics 4. Lifetime: up to 24 months.
  • _gid (if present): Distinguishes users for 24 hours.

Data collected:

  • Page views and navigation patterns
  • Approximate geographic location (country/region — not precise location; IP anonymized)
  • Browser type and version, device type, operating system
  • Referral sources (how you found our website)
  • Custom events: voice_variant, cta_click, pricing_click, quiz_start, quiz_complete, waitlist_signup

Hosting and Privacy-Focused Site Analytics (Vercel)

Our marketing website is hosted on Vercel. Vercel may collect privacy-focused, aggregated analytics (page views, country/region, browser type, device type, operating system, referral sources) that do not require persistent cross-site tracking cookies. The mobile app is hosted on Cloudflare and does not use Vercel.

Essential / Technical Cookies

We use essential cookies that are strictly necessary for the website to function or to record your privacy choices. These do not require consent.

  • bq_consent: First-party cookie that stores your analytics consent choice (granted or denied) so we don't ask again on every visit. Lifetime: 12 months. SameSite=Lax.
  • Other strictly-necessary cookies may be used for page navigation, load balancing, and security.

4. Cookies We Do NOT Use

We want to be transparent about what we don't do:

  • Advertising Cookies: We do not use cookies for targeted advertising.
  • Cross-Site Tracking: We do not track you across other websites.
  • Social Media Cookies: We do not embed social media tracking pixels.
  • Third-Party Marketing Cookies: We do not share cookie data with advertisers.

5. Third-Party Services

Google Tag Manager: Loads and manages measurement tags on the marketing website (container GTM-KF5TW3PD). See Google's Privacy Policy.

Google Analytics 4: Our website analytics provider (measurement ID G-38CRBBSBES). IP anonymization is enabled and we do not use Google Analytics for advertising or remarketing. See Google's Privacy Policy.

Vercel: Hosts the marketing website and serves the A/B test cookie (bq_voice) via Edge Middleware. See Vercel's Privacy Policy.

OneSignal and Resend (transactional email): Used to send waitlist confirmations and other transactional emails. These services may use tracking pixels or links to measure email opens and clicks. You can unsubscribe from marketing emails at any time using the link in each email.

6. Managing Cookies

You can control and manage cookies in several ways:

Browser Settings: Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies, accept only certain cookies, or notify you when a cookie is being set.

Consent banner: Use the cookie banner shown on your first visit to accept or decline analytics. Analytics tags run through Google Consent Mode v2, so declining (or not yet having accepted, in opt-in regions) prevents analytics cookies from being set. Clear the bq_consent cookie to be asked again.

Global Privacy Control (GPC): We honor GPC signals. If your browser sends a GPC signal, we automatically treat analytics as declined (without showing the banner) and treat it as a valid opt-out of any sale or sharing.

Here are links to cookie management instructions for popular browsers:

Note: Disabling cookies may affect your experience on some websites, though our website has minimal cookie dependency.

7. Mobile Application

The BlushQuest mobile app does not use browser cookies. Instead, we use:

  • Async Storage: Secure local storage on your device to persist your session and preferences.
  • PostHog Analytics: For in-app analytics and custom event tracking to improve the app experience. This uses device identifiers, not cookies.

8. Changes to This Policy

We may update this Cookie Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions about our use of cookies, please contact us:

Email: dpo@blushquest.com