Brilliani · Compliance Condo B.V.
Cookie Policy
Version 1.1, July 2026
This cookie policy explains which cookies and similar technologies Brilliani Labs (brillianilabs.com) uses, who sets them, what they do, how long they are stored, and how you can manage or withdraw your consent. It supplements our Privacy Policy, which describes how we handle personal data more generally. Brilliani Labs is operated by Compliance Condo B.V. (trading as Brilliani), Koningin Wilhelminaweg 219, 2802 HE Gouda, the Netherlands (KvK 95458859).
1. What are cookies?
Cookies are small text files that a website stores on your device. We also use localStorage, a comparable browser technology that stores small pieces of information on your device without sending them to a server with every request. Both are covered by this policy and by the Dutch Telecommunications Act and the GDPR.
2. How consent works on brillianilabs.com
- Essential cookies are always active. They keep you signed in, protect the sign-in process, and enable secure payment. They are necessary to provide the service and do not require consent.
- Analytics cookies are placed only after you accept them through our cookie banner. Nothing is loaded from Google Analytics before you consent.
- We do not use marketing or advertising cookies on brillianilabs.com.
- If you decline or later withdraw consent, Google Analytics is not loaded and any Google Analytics cookies already set are removed on a best-effort basis.
- Your choice is remembered on your device (see
bl_cookie_consentbelow) so we do not have to ask again on every visit. We record the date you chose and which version of the banner you answered, and we ask again after 12 months or whenever this policy changes materially, so your choice never becomes stale. - Accept and Decline are given equal weight. Both are a single click, in the same size, colour and position. Refusing is exactly as easy as agreeing, and browsing on without choosing is never treated as consent.
3. Cookies we set on brillianilabs.com
3.1 Functional (necessary): always active
| Name | Set by | Purpose | Storage period |
|---|---|---|---|
__Host-session | Brilliani Labs (first party) | Keeps you signed in to your Brilliani Labs account. Set with the HttpOnly, Secure and SameSite attributes; the matching session token is stored server-side only in hashed form. | 30 days |
bl_oauth_state | Brilliani Labs (first party) | Protects the Google sign-in flow against cross-site request forgery (CSRF). | 10 minutes |
bl_return_to | Brilliani Labs (first party) | Returns you to the page you were on after signing in. | 10 minutes |
__stripe_mid | Stripe | Fraud prevention and payment security. Set only when you open our subscription page or checkout after signing in. | 1 year |
__stripe_sid | Stripe | Fraud prevention and payment security (per-session). Set only on the subscription page or checkout after signing in. | 30 minutes |
bl_cookie_consent (localStorage) | Brilliani Labs (first party) | Remembers whether you accepted or declined analytics cookies, so the banner is not shown again, together with the date you chose and which version of the banner you answered. Stored on your device only; never sent to our servers. We ask again after 12 months, or sooner if this policy changes materially. | 12 months |
__cf_bm, cf_clearance | Cloudflare | Distinguishes people from bots so the site stays available and is not scraped or attacked. Set by our hosting provider as part of its bot protection, which also runs a short script that checks browser characteristics. It is not used for advertising and does not track you across other websites. | Up to 30 minutes (__cf_bm); up to 1 year (cf_clearance) |
3.2 Analytical: only after consent
| Name | Set by | Purpose | Storage period |
|---|---|---|---|
_ga | Google Analytics | Distinguishes visitors so we can see how the site is used (page views, popular tools). IP addresses are anonymised. | 2 years |
_ga_XCFLML6R69 | Google Analytics | Maintains the session state for our Google Analytics 4 property. | 2 years |
Embedded viewers. When our diamond viewer is embedded in another page (for example the showcase on www.brilliani.com), the embed itself never shows a cookie banner and never loads Google Analytics; consent is handled by the page that embeds it.
4. Cookies on our webshop (www.brilliani.com)
Our jewellery webshop at www.brilliani.com runs on Shopify and uses its own cookie banner. In addition to Shopify's functional cookies (shopping cart, checkout, login), that site uses, only after consent, Google Analytics (analytical) and the Meta Pixel and Google Ads (marketing) to measure advertising. The parties involved and the legal basis for this processing are described in section 4 and 5 of our Privacy Policy.
5. Managing or withdrawing your consent
- Use the "Cookie settings" link in the footer of every page on brillianilabs.com to reopen the banner and change your choice at any time.
- Declining (or withdrawing) consent stops Google Analytics from loading and removes its cookies from your device on a best-effort basis.
- You can also delete or block cookies through your browser settings. Note that blocking functional cookies may break signing in and other parts of the service.
6. Changes to this cookie policy
We may amend this cookie policy when our websites, our service providers or the law change. The current version is always available at brillianilabs.com/cookies, and the version and date are stated at the top of this document. Version 1.1 adds our hosting provider's bot protection cookies to the table in section 3.1, and records that your consent choice is dated, versioned and re-asked after 12 months.
7. Questions
Questions about cookies or this policy? Email us at labs@brilliani.com. You also have the right to lodge a complaint with the Dutch Data Protection Authority (www.autoriteitpersoonsgegevens.nl).