Cookie Policy
1. What are cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the site to remember information about your visit — such as your logged-in state or interface preferences — so you do not have to re-enter it on every visit.
This policy explains how Binders (operated by ICTOM, "we", "us", "our") uses cookies and similar browser storage technologies on:
- The Binders application — app.bindmee.com
- The Binders marketing website — bindmee.com
In addition to cookies, we use browser local storage for certain user-interface preferences. Local storage works similarly to cookies but stores data exclusively on your device — it is never transmitted to our servers as part of HTTP requests and is not accessible to any third party.
2. Cookies and local storage we use
We use a minimal set of cookies and local storage items. None are used for advertising, behavioural tracking, or cross-site profiling.
Strictly necessary cookies No consent required
These cookies are technically essential for you to log in and use the Service. Disabling them will prevent authentication from working. Under GDPR Article 5(3) and the EU ePrivacy Directive, strictly necessary cookies do not require prior consent.
| Cookie name | Purpose | Duration |
|---|---|---|
next-auth.session-token |
Contains your authentication session as an encrypted JSON Web Token (JWT). Required to keep you signed in across pages and requests. | 30 days (renewed on each authenticated request) |
next-auth.csrf-token |
Cross-Site Request Forgery (CSRF) protection token. Prevents other websites from making unauthorised requests on your behalf. | Browser session (deleted when browser is closed) |
cookie_consent |
Records the consent choice you make in the cookie banner ("all" or "necessary-only"). Required so your preference is respected on future visits without showing the banner again. | 1 year |
Functional local storage Consent required
These items store your interface preferences. They are kept only on your device, never leave your browser, and are not accessible to us or any third party. If you select "Necessary only" in the consent banner, these items will not be written.
| Key | Technology | Purpose | Duration |
|---|---|---|---|
theme |
localStorage | Remembers your preferred colour scheme (light or dark mode) so it is applied automatically on subsequent visits. | Persistent (until you clear browser storage) |
rp:open, rp:tab |
localStorage | Remembers whether the side tool panel is open and which tab was last active, so your workspace layout is preserved between sessions. | Persistent (until you clear browser storage) |
3. How we obtain your consent
When you first visit the Binders application (app.bindmee.com) without an existing consent record, a cookie banner is displayed at the bottom of the screen. It presents two clear options:
- Accept all — you consent to all cookies and local storage items described in Section 2, including functional local storage.
- Necessary only — you consent only to strictly necessary cookies. Functional local storage items will not be set until you subsequently grant consent.
Your choice is recorded in the cookie_consent cookie for one year. You may change your choice at any time (see Section 4).
We do not rely on "continued use of the site" as a form of consent. Consent is only valid when given by a clear, affirmative action — clicking a button in the banner — in compliance with GDPR Article 4(11) and Recital 32. Consent to functional cookies is not a condition of accessing the Service.
4. Managing and withdrawing your consent
You may withdraw or change your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. To update your preference:
- Clear your cookies and local storage in your browser settings. This removes the
cookie_consentrecord, and the consent banner will reappear on your next visit.
You can manage cookies through your browser's built-in settings:
Important: Disabling strictly necessary cookies (next-auth.session-token, next-auth.csrf-token) will prevent you from logging in or using any authenticated feature of the Service.
5. Third-party services
We do not load third-party advertising scripts, analytics platforms, or social media tracking pixels on bindmee.com or app.bindmee.com.
Fonts: All fonts are self-hosted and served from our own infrastructure. No requests are made to Google Fonts, Adobe Fonts, or any other external font service, so no associated data is transmitted to third parties when you load our pages.
6. Your rights
Under the EU General Data Protection Regulation (GDPR) and Morocco's Law 09-08, you have the following rights in relation to cookies and the personal data they may process:
- Right to information — this policy satisfies your right to be informed about which cookies we use and why.
- Right to withdraw consent — you may withdraw consent at any time (see Section 4). Withdrawal does not affect processing that occurred while consent was valid.
- Right to erasure — you may request deletion of personal data associated with your account, including data collected via session cookies, by submitting a request at bindmee.com/data-deletion or emailing gdpr@ictom.ma.
- Right to complain — if you believe we have not handled your data lawfully, you may lodge a complaint with:
- Morocco: CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel) — cndp.ma
- EU/EEA: the supervisory authority in your country of residence
We will respond to all rights requests within 30 days.
7. Changes to this policy
We will update this Cookie Policy whenever we add, remove, or change the cookies or local storage items we use. The "Last reviewed" date at the top of this page will be updated accordingly.
For material changes — in particular, introducing new non-essential cookies that require consent — we will re-display the consent banner so that you can review and confirm your preference before any new items are set.
8. Contact us
Data Controller: ICTOM
Email: gdpr@ictom.ma
Data deletion requests: bindmee.com/data-deletion
We aim to respond to all enquiries within 5 business days.