Bona Fide Cookie Notice
Effective date: 19 October 2026 · Last updated: 19 October 2026
Bona Fide (The Republic US LLC) uses very few cookies and similar technologies, and no advertising, social-media or third-party analytics trackers. In the EU and UK, storing or reading information on your device needs your consent unless it is strictly necessary for a service you asked for (ePrivacy Directive Art. 5(3), UK PECR reg. 6). Everything below is either strictly necessary or a preference you set yourself, except where marked.
Signing page (sign.bonafidesign.com and embedded signing)
- No cookies. The link or embed gives the page a session token, which is exchanged for a short-lived access token kept only in the page’s memory.
- Local storage
bona-fide.signer.locale: remembers the language you chose. Preference; stays until you clear it.
Dashboard and API (app.bonafidesign.com, api.bonafidesign.com)
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
bf.session_token and other bf.* cookies set by the sign-in library |
First-party cookie (Secure, HttpOnly) | Keeps you signed in and protects against forgery | Session: 7 days, extended while you are active (staff: 8 hours) | Strictly necessary |
bf-theme |
Local storage | Light/dark theme you chose | Until cleared | Preference (strictly necessary for the requested setting) |
bf-mode |
Local storage | Remembers whether you were in live or test mode | Until cleared | Preference |
bona-fide.signer.locale |
Local storage | Language you chose on public pages | Until cleared | Preference |
bf.attribution |
Local storage | Keeps the utm_* and referral (ref) parameters of the link you arrived on until you sign up, then sends them once with your new account (first-party only, used for referral rewards and to know which campaigns work) |
Until sign-up or cleared | Not strictly necessary |
| Cloudflare Turnstile | Third-party challenge on sign-up and sign-in | Distinguishes people from bots; Cloudflare may read or store limited information in your browser to perform the check | Per challenge | Strictly necessary (security) |
Website (bonafidesign.com, docs.bonafidesign.com)
| Name | Type | Purpose | Duration | Category |
|---|---|---|---|---|
bf.site-locale |
Local storage | Language you chose | Until cleared | Preference |
bf.campaign-dismissed |
Local storage | Remembers that you closed an announcement banner | Until cleared | Preference |
Cloudflare security cookies (for example __cf_bm, cf_clearance) |
Third-party (Cloudflare) cookies | Bot management and security challenges, only if those features are enabled for our site | Up to 30 minutes / as set by Cloudflare | Strictly necessary |
Your choices
You can delete cookies and local storage in your browser settings. If you block the sign-in cookie, you cannot use
the dashboard; the signing page works without cookies. You can remove the bf.attribution entry at any time by
clearing the site data for app.bonafidesign.com in your browser; the Services keep working, but a referral or campaign
linked to your sign-up may then not be recorded.
We do not use advertising or analytics cookies. If we add any analytics, chat or marketing tool, we will update this notice first and, where the law requires, ask for your consent before it loads, with an option to reject that is as easy to use as the option to accept.
More about how we handle personal data: Privacy Policy. Contact: contact@bonafidesign.com.
Published in English, which is the governing version. Questions: contact@bonafidesign.com. The Republic US LLC, 16192 Coastal Highway, Lewes, Delaware 19958, USA · +1 302 984 7474