Cookies and device storage

Pre-launch preview. Applications are closed while operator and recipient details are completed.

Essential storage

BLSESSID and BLAPPSESSID connect your browser to encrypted server sessions. They are HTTP-only, use Secure on HTTPS and SameSite Lax. The server session expires after two idle hours. The installed app may retain an opaque recovery token in device storage; server recovery expires within 30 days and does not itself authenticate your account.

Language and calculator preferences remain on the device until you clear them. The site removes legacy application drafts and does not save your current identity document, income, phone or email as a browser form draft. Use a private device and sign out when finished.

Optional analytics

Third-party advertising and analytics pixels are disabled. Optional analytics choices are recorded separately, with no preselected acceptance. You may reject optional analytics or withdraw it in My account. Essential application, referral click and conversion records are still used for the disclosed service and reconciliation purposes. Introducing new trackers requires an updated inventory, notice and choice.

Control and contact

You can clear site data in your browser, remove the installed app and withdraw optional permissions in My account. Clearing device storage may remove recovery capability but does not delete server records; use a privacy request for those. Contact [PRIVACY_EMAIL]. Version 2026-10-v12, effective [EFFECTIVE_DATE].