Cookie Policy
Last updated: 31 July 2026
1. The short version
We use a small number of cookies. Two of them remember which country you are shopping from, so we can show you the right prices. The rest are analytics, and they are only ever set after you press Accept on the cookie banner.
We do not use advertising cookies, we do not build interest or advertising profiles, and we do not sell or share your browsing behaviour with advertisers. Every cookie this site sets or allows is listed below by name.
2. Cookies we set
| Name | Provider | Purpose | Essential? | Duration | When it is set |
|---|---|---|---|---|---|
| bpp_country | BikePartPicker.net (first party) | Stores which country you are shopping from (e.g. GB or US) so prices, currency and retailer availability are the right ones for you. It holds a two-letter country code and nothing else: no identifier, no profile. | Essential | 1 year | On your first visit, either from your approximate country (determined by our CDN from your IP address) or from an explicit choice in the region selector. |
| bpp_country_src | BikePartPicker.net (first party) | Records whether the country above came from your own choice or was defaulted from your location, so an explicit choice is never silently overridden. Holds one of "user", "geo" or "legacy". | Essential | 1 year | At the same moment as bpp_country; the two are always written together. |
| _ga, _ga_<id> | Google Analytics 4 (Google Ireland Limited) | Distinguishes one visitor from another and keeps a session together, so we can see aggregate traffic and which pages are used. Not used to build an advertising profile and not shared with Google Ads. | Non-essential | 2 years | Only after you press Accept on the cookie banner. Decline, or ignore the banner, and Google Analytics is never loaded at all. |
| ph_<key>_posthog | PostHog | Product analytics: a random device identifier used to group one person’s page views and interactions so we can see which features are actually used. | Non-essential | 1 year | Only after you press Accept on the cookie banner. The PostHog library is not even downloaded before that. |
| _GRECAPTCHA | Google (reCAPTCHA v3) | Bot protection on the contact and sign-up forms. Google uses it to score whether a submission looks automated. | Essential | 6 months | Only when you load a page carrying a protected form (contact, sign-up). It is not set while you browse the catalogue. |
3. Similar technologies (browser storage)
Some things we need to remember are kept in your browser’s local storage rather than in a cookie. They are not sent to us with every request the way a cookie is, but they are stored on your device, so we list them here too.
| Name | Provider | Purpose | Essential? | Duration | When it is set |
|---|---|---|---|---|---|
| bpp_cookie_consent | BikePartPicker.net (first party) | Remembers whether you accepted or declined analytics cookies, so the banner does not ask again. This is what the analytics entries above are gated on. | Essential | Until you clear your browser storage | The moment you press Accept or Decline on the cookie banner. |
| bikepartpicker_draft_cache, bikepartpicker_session_id | BikePartPicker.net (first party) | Keeps the build you are working on, so it survives a page reload before you have signed in. The session id is a random value used to attach an unsaved build to your browser; it is not linked to any identity. | Essential | Until you clear your browser storage | When you add your first part to a build. |
| Amazon Cognito tokens | Amazon Web Services | Keeps you signed in to your account between visits. | Essential | Until you sign out, or the token expires | Only when you sign in. Signed-out visitors never have these. |
4. How to withdraw consent
You can withdraw consent for the non-essential (analytics) cookies at any time, and it takes effect immediately:
- Clear this site’s storage in your browser. That removes the
bpp_cookie_consentrecord of your choice, so the cookie banner appears again on your next visit and you can press Decline. In Chrome, Edge and Firefox this is under Settings → Privacy → Cookies and site data → See all site data, then search forbikepartpicker.net. In Safari it is Settings → Privacy → Manage Website Data. - Delete the analytics cookies directly (
_ga,_ga_<id>,ph_<key>_posthog) from that same screen. - Email us at privacy@bikepartpicker.net and we will confirm what we hold and delete it.
Declining analytics does not degrade the site: search, the build tool, compatibility checks and price comparison all work identically either way. The only difference is that we cannot see aggregate usage.
The essential cookies cannot be switched off from within the site, because the country cookie is what makes prices and availability correct for where you are. You can still block or delete them in your browser; if you do, the site will default to United Kingdom pricing on every visit.
5. Third-party policies
Where a cookie above is set by someone else, their own privacy policy governs it: Google (Analytics and reCAPTCHA), PostHog, and Amazon Web Services (Cognito sign-in).
When you click through to a retailer, that retailer (and, where the link is an affiliate link, the network it routes through) will set their own cookies on their own site. We have no control over those. Our affiliate disclosure names every retailer and network involved, and our privacy policy explains what they receive.
6. Changes and questions
If we add or remove a cookie we update the tables above in the same change, and move the “last updated” date at the top of this page. Questions go to privacy@bikepartpicker.net.