Cookie Notice
Effective 2026-09-23.
This notice explains the cookies and similar browser storage used by BaseLoom at https://app.baseloom.app. It forms part of our Privacy Notice at https://app.baseloom.app/?view=legal&doc=privacy.
1. The short version
We use only what is strictly necessary to make the tools work. We use no analytics, advertising, social media or other third-party tracking cookies, pixels or scripts.
2. What we use
| Name or type | Set by | Purpose | Kind | Lasts |
|---|---|---|---|---|
| Application session state (over a secure websocket connection) | BaseLoom | Keeps your place in a tool, the files you loaded and the results on screen, for this browser tab | Strictly necessary | Until you close the tab or the session times out |
| Session affinity cookie | Our hosting provider (Microsoft Azure), on our behalf | Routes your requests to the same server, so the session in memory stays with you | Strictly necessary, first-party | The browser session |
Security token (_streamlit_xsrf) | BaseLoom (application framework) | Protects uploads and actions against cross-site request forgery | Strictly necessary | The browser session |
| License key | BaseLoom | Unlocks the paid tool you subscribed to, after you enter the key | Strictly necessary | Held only in the session memory; not stored in a persistent cookie or local storage |
Display preference (bl-theme) | BaseLoom | Remembers whether you chose light or dark mode, only after you use the switch | Strictly necessary (a display setting you asked for) | Browser local storage on your device, until you clear it; holds only the word light or dark |
The application framework we use can report anonymous usage statistics to its maker. We have switched that off.
3. What we do not use
- No analytics cookies or services.
- No advertising, retargeting or conversion pixels.
- No social media plugins or embedded third-party content that sets cookies.
- No third-party fonts: our fonts are served from our own servers, so loading a page does not contact a font provider.
- No fingerprinting or cross-site tracking.
4. Checkout pages
When you subscribe, you go to a checkout page run by Dodo Payments, our seller of record. That page is Dodo's site. Any cookies it sets are governed by Dodo's own cookie and privacy policies, not this notice.
5. Why there is no consent banner
The law in the EU (ePrivacy Directive), the UK (PECR) and elsewhere allows cookies and storage that are strictly necessary to provide a service the user asked for, without prior consent. Everything we use falls in that category, so we do not show a consent banner.
If we ever want to add a cookie or similar technology that is not strictly necessary, we will ask for your consent first, give you a real choice to refuse, and update this notice before it is used.
6. Controlling cookies
You can block or delete cookies in your browser settings. If you block the cookies above, the tools will not work reliably, because your session cannot stay on one server.
7. Contact
Questions: privacy@baseloom.app.