Cookie Policy

1. Who is responsible?

For personal data processed through cookies for BioLink.page's own purposes, the controller is Dijital Mekan Ltd, a company registered in England and Wales, with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. You can reach us at hi@biolink.page.

When a user adds Meta Pixel, Google Analytics, TikTok Pixel or a similar integration to their own BioLink.page profile, that user is also a controller for the purposes they have chosen. Profile owners are responsible for providing their own privacy information and for managing the necessary consents.

2. What are cookies and similar technologies?

Cookies are small text files stored on your device when you visit a website. Local storage, pixels, tags, SDKs, web beacons and similar identifiers can be used for the same purposes. For simplicity, this policy refers to all of them as "cookies".

First party cookies are set by biolink.page or biolink.love, whichever you are visiting. Third party cookies are set by integration, analytics, advertising, video or other service providers. Session cookies are deleted when you close your browser; persistent cookies expire after the period stated for them.

In the United Kingdom, the use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) together with the UK GDPR and the Data Protection Act 2018, overseen by the Information Commissioner's Office (ICO), because the operator is a company registered in England and Wales. If you are in the United States, state privacy laws such as the California Consumer Privacy Act may give you additional rights over cookies used for advertising; the preference panel described below is where you make and change your choices.

3. Cookie categories and lawful basis

• Strictly necessary: required for signing in, security, load balancing, remembering your language and cookie choices, and delivering a feature you have explicitly requested. These fall under the PECR strictly necessary exemption and cannot be switched off.
• Functional: remember non-essential display, media and personalization preferences. They run with your consent unless another appropriate basis applies.
• Analytics and performance: measure visits, errors, traffic sources and feature usage. They run with your consent.
• Advertising and marketing: used for campaign measurement, retargeting, interest profiles and ad delivery. They never run without your consent.
• Affiliate attribution: used to identify the partner who referred you first. To the extent they process personal data and are not strictly necessary, they run subject to your choice.

4. Affiliate tracking: 30 days, first referrer

When you click an affiliate link, and to the extent you have allowed it, the referring partner's identifier is stored in a first-party cookie named referred_by. The attribution record lasts 30 days.

If you click another partner's link while the first attribution is still valid, the first partner keeps it and the later click does not replace it. Once the 30 days have passed, a new partner link can start a new attribution. When you create an account within that window, the partner match at the moment of registration is fixed to your account permanently, and later clicks on partner links do not change it. An account that already exists is not counted as a referral, even if it later clicks a referral link. If you reject or delete the cookie, use a different browser or device, or the technical record cannot be created, automatic attribution may not be possible.

This tracking is used only for commission attribution, fraud checks and program reporting. For the full program rules, see the affiliate program page.

5. Current cookie inventory

The table below reflects the cookies and similar technologies identified in an anonymous page and source review dated September 18, 2026. Whenever a provider or tag changes, this table and the preference panel are updated together.

Similar technologies that do not use cookies: tags fired through Tag Manager, pixels users add to their own profiles, the PWA service worker, BioLink.page's own web push subscription token, local storage keys and the server-side record of an affiliate match after registration may be used. Even where these leave no cookie, they can transmit IP, device, page and event data, so they remain subject to the applicable preference and transparency rules.

6. Integrations on user profiles

BioLink.page users can, within the limits of their plan, add their own analytics or advertising pixels to their profiles. Such tags:

• must not load or send data before the visitor consents to the relevant category;
• should appear in the preference panel with provider and purpose information;
• should be explained in the profile owner's own privacy information;
• must stop when consent is refused or withdrawn.

BioLink.page may technically block an integration that breaches these requirements or suspend the feature on the account concerned.

7. How do you manage your cookie preferences?

On your first visit, "Accept all", "Reject all" and "Manage preferences" are offered with equal prominence. Every category other than strictly necessary is off by default. Changing your mind later is as easy as choosing the first time.

Open cookie preferences

You can also delete or block cookies in your browser settings; however, essential functions such as sessions and security may then stop working. Browser settings do not replace the per-category information and consent mechanism on the site.

8. International transfers

Where Google, Meta, Cloudflare or an integration chosen by a profile owner (such as YouTube, Spotify, TikTok, Google Forms, Typeform or Calendly) is used, device, usage, cookie or interaction data may be transferred outside the United Kingdom, including to the European Economic Area and the United States. Such transfers rely on UK adequacy regulations, the UK International Data Transfer Agreement or Addendum, or another safeguard permitted under the UK GDPR. Details of the safeguards used are available on request via hi@biolink.page.

9. Push notifications and email measurement

Installing the app as a PWA and granting browser push permission are not cookies. Push notifications use BioLink.page's own web push configuration and the browser's separate permission prompt. Where permission is granted, browser and device information, the subscription endpoint or token, notification content and interactions may be processed. Marketing notifications are only sent where the required marketing preference is also in place. If you withdraw permission, the related push subscription record is deleted and the channel closes. Not granting permission does not affect the core service. If open or click measurement is used in marketing emails, that technology, its purpose and its duration are disclosed separately in the inventory.

10. Updates and contact

When cookies or providers change, the inventory and the preference panel are updated. If a new purpose materially changes the scope of your choice, you are asked to choose again.

Questions: hi@biolink.page · Data protection requests: see the Privacy Notice.