This inventory should be read with our Cookie Policy. It lists the current confirmed cookies and similar storage used by Brain-Shot Academy services. Not every item is used on every service or every visit.
Current technologies
| Technology | Purpose | Set by / third-party access | Duration | Category |
|---|---|---|---|---|
__Host-bsa_sec_anon | Anonymous service-security identifier | Brain-Shot Academy; processors may handle resulting data | Up to 30 days | Strictly necessary security |
__Host-bsa_sec_session | Security identifier for the current account session | Brain-Shot Academy; processors may handle resulting data | 30 minutes after inactivity | Strictly necessary security |
bsa_auth_challenge | Complete a short-lived authentication or verification flow | Brain-Shot Academy; processors may handle resulting data | 20 minutes | Strictly necessary authentication |
sb-jrclairmdhudqhbwtiay-auth-token and numbered chunks | Authenticate a signed-in user and maintain the requested account session | Brain-Shot Academy and its authentication processor | Up to 400 days in services configured for persistent sign-in; may end sooner | Authentication |
bsa_st_sid and related session storage | Correlate security events during the current browser session | Brain-Shot Academy; processors may handle resulting data | Browser session | Strictly necessary security |
bsa_dk_seed, bsa_dk, and related local storage | Recognise a device for account security and abuse prevention | Brain-Shot Academy; processors may handle resulting data | Up to 1 year; related local storage remains until cleared | Security |
bsa_gid | Maintain continuity for a requested gift or access flow | Brain-Shot Academy; processors may handle resulting data | 365 days | Functionality |
bsa-shop-basket and related local storage | Remember basket contents between visits | Brain-Shot Academy; processors may handle resulting data | 365 days or until cleared | Optional functionality |
_bsa_consent, _bsa_consent_meta, and _bsa_crid | Store and demonstrate cookie choices | Brain-Shot Academy; processors may handle resulting data | 395 days | Strictly necessary preference record |
| Account or application launch settings in session storage | Remember how an account or application was opened during the visit | Brain-Shot Academy; processors may handle resulting data | Browser session | Requested functionality |
bunny_shield, bunny_shield_chk, B_ID, and B_BD | Detect automated abuse and allow legitimate requests through service protection | Brain-Shot Academy and BunnyWay d.o.o. | Up to 1 year | Security |
How categories are applied
Authentication and security technologies are used without consent only to the extent that they are strictly necessary and proportionate for a service or security function requested by the user. Persistent functionality is consent-managed where applicable law requires it.
Optional analytics or marketing technologies are not included above unless they are active in the current deployment. If introduced, they will be added to this inventory and, where required, blocked until consent is given.
Durations can be shortened by logout, deletion, browser limits, or a change in service configuration. They are not extended beyond the periods stated above without updating this inventory where required.