Last updated: February 12, 2026
Data Controller: Bank of Bali · Contact: hello@bankofbali.com
This Cookie Policy explains how Bank of Bali uses cookies and similar tracking technologies. It complements our Privacy Policy. You can change your preferences at any time.
Cookies are small text files placed on your device by websites you visit. They allow the site to remember your actions and preferences (e.g. login session, language) over time, so you don't have to keep re-entering them. Similar technologies include localStorage, sessionStorage and pixel tags.
We do not use advertising or cross-site tracking cookies.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| access_token | Strictly necessary | JWT session, httpOnly, secure. | 24 hours |
| refresh_token | Strictly necessary | Renews access token without re-login. | 7 days (rolling) |
| bob_authed | Strictly necessary | Client-side flag — skips /auth/me probe for guests. | Session |
| bob_cookie_consent | Strictly necessary | Stores your cookie banner choice. | 12 months |
| bob_theme / bob_lang | Preferences | Remembers light/dark and language. | 12 months |
| ph_* | Analytics (opt-in) | PostHog anonymised product analytics. Loaded only after consent. | Up to 12 months |
The first time you visit Bank of Bali, our banner asks for your consent. You can choose:
You can change your decision any time:
You can also block all cookies through your browser settings — note that this may break the login session.
The only third-party tool we load is PostHog for product analytics, and only with your explicit consent. PostHog data is hosted in the US/EU; see their privacy page at posthog.com/privacy. We do not embed Google Analytics, Facebook Pixel, or advertising trackers.
We will update this Cookie Policy whenever we add, remove or change a cookie. Material changes will be flagged on the cookie banner.
Cookie questions: hello@bankofbali.com
We respect your privacy.
Bank of Bali uses strictly-necessary cookies to keep you signed in. Analytics cookies are optional and never used for advertising. See our Cookie Policy and Privacy Policy.