Cookies

Last updated: 22 October 2026.

On https://backup.alix-services.com the only cookie is __Host-bs_session. It is strictly necessary. It keeps you signed in.

The cookie is HttpOnly, Secure, SameSite=Strict, and Path=/. It has no Domain attribute. It is not readable by script. It is not an analytics cookie and it is not a tracking cookie.

We do not set analytics cookies, advertising cookies, or third-party cookies. There is no analytics script on the site.

A browser on http://localhost uses the name bs_session for the same session, because the __Host- prefix requires HTTPS. Production uses __Host-bs_session only.

The recovery-key reminder can be turned off with a link. That link puts a token in the address, not in a cookie. Opening the link does not opt you out. Confirming it does.