What cookies are
Cookies are small text files a website stores in your browser to remember actions and preferences, such as being signed in or your language. They can be first-party or third-party, and last only for the session or for a set time.
The cookies we use
One cookie is strictly necessary for the end-customer portal, so we do not ask for consent to it. On bonuxo.com and on the sign-up screen (app.bonuxo.com/signup) we also use Microsoft Clarity analytics cookies, which you can reject, and one cookie that remembers your choice. No advertising cookies.
| Name | Where | Purpose | Attributes | Duration |
|---|---|---|---|---|
bonuxo_cliente | Customer portal (register) | Keep the customer signed in to the portal. | HttpOnly, Secure, SameSite=Lax, host-only | Until the session ends or sign-out |
bonuxo_consent | bonuxo.com and sign-up | Remember whether you accepted or rejected Clarity, shared between bonuxo.com and app.bonuxo.com so we ask only once. | Secure, SameSite=Lax, Domain=bonuxo.com | 180 days |
_clck, _clsk | bonuxo.com and sign-up (Microsoft Clarity, first-party) | _clck keeps a pseudonymous Clarity user ID; _clsk joins the pages of one visit into a single recording. | First-party | Set by Microsoft |
MUID, CLID, ANONCHK, MR, SM | Microsoft domains (third-party) | Microsoft cookies that Clarity lists as its own. Clarity does not use them for advertising (ANONCHK is always 0); we always deny advertising storage. | Third-party | Set by Microsoft |
Microsoft's list: Clarity cookies. We use no other cookies.
Local storage (not cookies)
Bonuxo apps also store data in the browser's localStorage, which is never sent to the server automatically:
| App | Keys | Purpose |
|---|---|---|
| Dashboard | bonuxo_token, bonuxo_refresh_token, bonuxo_user, bonuxo_lang | Business session, language, dismissed alerts and guided-tour progress. |
| Sign-up / customer portal | card access tokens | Card access and a cache of the remembered card. |
| Scanner | staff session | Staff session and shift preferences. |
Microsoft Clarity
On bonuxo.com and on the sign-up screen only, Microsoft Clarity records how a page is used (mouse movement, clicks, scrolling) and builds heatmaps, so we can fix what gets in the way. It is not loaded anywhere else in the business dashboard, nor in the end-customer apps. Clarity masks form fields, numbers and email addresses, and we mark the personal data on the sign-up screen as masked too. Microsoft keeps recordings for 30 days and heatmaps for 13 months. Visit counts come from Umami, which runs on our own server and uses no cookies (see the Privacy policy). The site fonts are self-hosted. Cards in Apple Wallet and Google Wallet are native system apps and do not use cookies.
Visitors with Do Not Track or Global Privacy Control turned on do not load Clarity at all.
The site notice
The notice on bonuxo.com and on the sign-up screen has two buttons of the same weight: Accept and Reject. If you appear to be visiting from the European Economic Area, the United Kingdom or Switzerland (we infer it from the page, your browser language and time zone), Clarity sets no cookies until you accept. Elsewhere, Clarity's analytics cookies are on until you reject them. Advertising storage is always denied.
If you reject, Clarity deletes its cookies and is not loaded on your next visits. You can change your choice at any time:
How to delete them
You can delete cookies and local storage in your browser settings (Chrome, Firefox, Safari, Edge: the privacy and site data section). Deleting bonuxo_cliente signs you out of the customer portal; deleting bonuxo_consent makes the notice ask again. Blocking cookies does not affect the business dashboard.
Updates
If we add cookies or third-party tools, we will update this page first and notify businesses with reasonable notice. The date at the top shows the current version.
Contact
Questions: contacto@bonuxo.com. See also the Privacy policy.