Cookie notice

What this notice covers

This notice covers cookies and similar technologies - anything that stores or reads information on your device - across the BarkUp website at barkup.co and the signed-in BarkUp app.

It is short because there is very little to describe. BarkUp uses no analytics, no advertising and no tracking of any kind, so the only things listed here are the ones without which sign-in or the waitlist form would not work.

Our privacy policy explains what we do with personal information more broadly.

This website sets no cookies at all

The marketing site you are reading now - every page except the app - sets no cookies of its own, and stores nothing in your browser's local or session storage. There is no consent banner because there is nothing to consent to.

The waitlist form keeps the little it needs, such as the moment you opened the form and the security token for that submission, in the page's memory only. It is gone the moment you navigate away or close the tab, and it is never written to your device.

The one third-party script: Cloudflare Turnstile

The waitlist form is protected by Cloudflare Turnstile, which distinguishes a person from an automated script without the puzzles and image grids of a traditional CAPTCHA. It is the only third-party script anywhere on this website.

It loads from challenges.cloudflare.com, and only on pages that actually contain the waitlist form. Every other page of the site loads nothing from anyone but us.

The check runs inside a frame served by Cloudflare, so anything it stores belongs to Cloudflare's domain rather than to barkup.co, and it is not readable by us. Cloudflare's own privacy policy and Turnstile documentation are the authority on what it stores and for how long. What we can tell you exactly is what our side does: we send Cloudflare the token their widget produces, they tell us pass or fail, and we keep the answer, not the signals behind it.

This is a strictly necessary security control for a form you asked to use, so it does not require consent. Blocking it will stop the waitlist form from working.

Cookies in the BarkUp app

The signed-in app sets four cookies, all of them strictly necessary and all of them set by us. Every one is httpOnly, which means your browser will not let any script read it - including a malicious one - restricted to this site, and marked Secure so it is only ever sent over an encrypted connection.

• sb-access-token - proves to our servers that a request is yours. Lasts for the browser session and is cleared when you sign out.
• sb-refresh-token - renews the above so you are not signed out mid-walk. Lasts for the browser session and is cleared when you sign out.
• oauth-verifier - set only if you choose to sign in with Google, and only for the seconds that takes. It ties the reply from Google to the request your browser made, so nobody can substitute their own. Expires after 10 minutes and is deleted as soon as you land back on BarkUp.
• oauth-next - remembers which page you were heading to before Google sign-in. Same 10-minute lifetime, deleted at the same moment.

The app stores nothing in local or session storage. There is no preference cookie, no "remember this device", and no identifier that persists after you sign out.

What we do not use

No analytics of any kind. No Google Analytics, no Vercel Analytics, no privacy-friendly alternative either. No advertising or remarketing tags, no Meta or TikTok pixel, no conversion tracking, no session recording or heatmaps, no A/B testing tool, no embedded video or social widgets, and no third-party fonts - our typefaces are served from our own domain.

We do not know how many people visited this page, which is the honest cost of that position and one we are content with.

Other requests your browser makes

Two things are not cookies but are worth naming, because they are still requests leaving your browser.

Maps in the app are drawn from image tiles served by a map provider. Loading an image tells that provider which tiles were asked for, which is a rough indication of the part of the country being looked at - never who is looking, and never finer than the coarse area the rest of the service uses.

Place search, when you name a meeting point for a walk, goes through our own server rather than from your browser. The geocoding service therefore never sees your address or your connection at all.

Your choices

There is nothing to opt out of on this website, because nothing optional is loaded.

Your browser can block or delete cookies and site data for any site, usually under Privacy or Settings. Blocking BarkUp's cookies will prevent you from signing in and will stop the waitlist form working; there is no way around that, because those cookies are how the service knows a request is yours.

Signing out deletes the app's cookies immediately.

Changes and contact

If BarkUp ever adds a technology that is not strictly necessary, we will update this page first, and it will not load until you have chosen to allow it. A reject option will be as easy to use as accept.

Questions about anything here: info@barkup.co.