01 What Are Cookies?
Cookies are small text files that a website stores on your browser or device when you visit it. They are widely used to make websites work, remember your preferences, and provide information to site owners.
Cookies are not programs and cannot execute code, install software, or access your personal files. They are simply data files stored by your browser.
02 How We Use Cookies
Bloco uses cookies on our web dashboard (the admin panel accessed via your browser) for the following purposes:
- Session authentication: To keep you logged in securely after you enter your OTP or credentials — without this cookie, you would be logged out on every page navigation
- Security tokens: CSRF protection tokens to prevent cross-site request forgery attacks on form submissions
- Preferences: To remember your selected language, timezone, and dashboard view settings so you don't have to reset them every visit
- Performance: To store lightweight state (e.g. which sidebar menu is expanded) for a faster, smoother dashboard experience
03 Types of Cookies We Use
| Cookie Name | Type | Purpose | Duration |
|---|---|---|---|
bloco_session |
Strictly Necessary | Maintains your authenticated login session on the admin dashboard | Session (cleared on browser close) or 30 days if "Remember Me" is selected |
bloco_csrf |
Strictly Necessary | CSRF security token — prevents cross-site request forgery on form actions | Session |
bloco_prefs |
Functional | Stores your dashboard preferences (timezone, language, sidebar state) | 1 year |
bloco_consent |
Functional | Records your cookie consent choice so we don't show the banner on every visit | 1 year |
| Analytics / Ad cookies | Not Used | We do not use Google Analytics, Facebook Pixel, or any advertising tracking cookies | N/A |
04 Third-Party Services
The Bloco web dashboard does not embed third-party advertising networks or social media tracking pixels. However, the following third-party services may set their own cookies or tokens as part of their functionality:
- Payment gateway: When you initiate a payment, our payment processor may set session cookies to secure the transaction flow. These are strictly necessary for completing the payment and are governed by the payment processor's own cookie policy.
- Google Fonts: We load fonts from Google Fonts CDN, which may log your IP address as part of font delivery. No tracking cookie is set by this service.
We have chosen third-party integrations that minimise or eliminate unnecessary cookie usage. We do not embed YouTube, Facebook, Twitter, or other social media iframes on our dashboard that could track your behaviour.
05 Mobile App & Device Tokens
The Bloco resident app and guard app are native mobile applications. They do not use browser cookies. Instead, the apps use:
- Secure local storage: Your authentication token is stored in the device's secure keychain (iOS) or encrypted shared preferences (Android) — not a browser cookie
- Push notification token (FCM/APNs): A device-specific token is stored to deliver push notifications for visitor approvals, payment confirmations, and society notices. This token is not used for advertising or cross-app tracking.
- Location permission: The app requests location permission only once — during society registration to geo-tag the building. We do not continuously track your location in the background.
06 Your Control Options
6.1 Browser Cookies
You can control and delete cookies through your browser settings. Here's how for common browsers:
- Google Chrome: Settings → Privacy and Security → Cookies and other site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies
⚠️ If you delete or disable the bloco_session cookie, you will be logged out of the admin dashboard and will need to log in again with your OTP.
6.2 Mobile App Permissions
- Push notifications: Disable in your device's notification settings (iOS: Settings → Bloco → Notifications; Android: Settings → Apps → Bloco → Notifications)
- Location access: Revoke in device settings at any time — this will only affect the geo-tagging feature during onboarding
07 Cookie Retention
Session cookies are automatically deleted when you close your browser. Persistent cookies (like bloco_prefs and bloco_consent) expire after the periods listed in the table above. You can delete any cookie at any time via your browser settings.
08 Changes to This Policy
We may update this Cookie Policy when we change how we use cookies. Material changes will be communicated via an in-app notification or a banner on our website. The updated date at the top of this page will reflect when the policy was last revised.