Cookie Policy
Last updated: 23 September 2026 · the French version is authoritative.
Cookie Policy
Last updated: 23 September 2026.
The French version is the legal and original version; the NL/DE/EN versions are courtesy translations; in the event of any discrepancy, the French version prevails.
At bloo.Cards (a digital business card platform published by Molderez-Consult SRL), we respect your privacy. This Cookie Policy transparently explains the trackers we actually use on our platform, the legal basis for placing and reading them, as well as how you can control your preferences.
In this document, we clearly distinguish two technical mechanisms that are often confused:
- cookies in the strict sense (small files automatically sent back to the server);
- the browser's local storage (localStorage), which remains on your device and is not automatically transmitted to the server.
This policy is established in accordance with:
- the ePrivacy Directive 2002/58/EC (amended by Directive 2009/136/EC) — protection of access to terminal equipment and tracking, Article 5(3);
- the General Data Protection Regulation — GDPR (Regulation (EU) 2016/679), in particular its Articles 6, 7 and 12 to 22, for the processing of personal data;
- the Belgian Act of 13 June 2005 on electronic communications (Article 129), which transposes the ePrivacy Directive into Belgian law;
- the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data;
- the recommendations of the Data Protection Authority (APD).
Contents
- Definitions and fundamental concepts
- Inventory of trackers actually used
- Browser local storage (localStorage)
- Third-party and partner cookies
- Legal bases
- Consent management
- Your rights and your control
- Disabling cookies from your browser
- Contact
- Language and language primacy
- Change history
1. Definitions and fundamental concepts
What is a cookie?
A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. It generally contains an identifier or a value, an expiry date and the domain that created it. On each subsequent visit, your browser automatically sends the cookie back to the server, which makes it possible to recognise you or to remember certain actions.
Types of cookies according to their lifespan
| Type | Definition | Typical duration |
|---|---|---|
| Session cookie | Automatically deleted when the browser is closed | Duration of the session |
| Persistent cookie | Kept on the device for a defined period | From a few hours to several months |
| Third-party cookie | Placed by another domain (provider, integrated service) | Depending on the third party |
Types of cookies according to their purpose
- Essential / strictly necessary — indispensable to the operation of the site (session, security, storing the consent choice);
- Functional — improve the experience (language, theme preferences);
- Analytical — measure the audience and usage of the site;
- Marketing / advertising and social media — tracking for advertising purposes: not used to date by bloo.Cards (see section 2).
Cookies and local storage: an important distinction
In addition to cookies, a site may use the browser's local storage (localStorage). Unlike a cookie, data in localStorage is not automatically transmitted to the server on each request: it remains on your device and is only read by the page's code. bloo.Cards uses localStorage solely to store two interface preferences (language and theme). These elements are detailed in section 3 and are deliberately not presented as cookies, in order to faithfully reflect the technical reality.
2. Inventory of trackers actually used by bloo.Cards
This inventory reflects the trackers actually deployed in production. It does not describe any theoretical or non-installed tracker.
Category 1 — Essential cookies (strictly necessary)
Legal basis: Article 5(3) of the ePrivacy Directive (exemption for strictly necessary trackers) and Article 6(1)(f) of the GDPR (legitimate interest). Consent required: no.
| Name | Party | Purpose | Category | Duration |
|---|---|---|---|---|
| PHPSESSID | bloo.Cards (first party) | PHP session cookie. Maintains the state of your session between requests (login, form security). Placed with the Secure, HttpOnly and SameSite=Lax attributes. Without it, authentication and forms do not work. | Essential | Duration of the session (deleted when the browser is closed or when the session expires) |
| bloo-consent | bloo.Cards (first party, cookie + local storage) | Stores your choice (accept or refuse audience measurement) so as not to redisplay the banner on each visit. | Essential | 6 months |
Category 2 — Analytical cookies (audience measurement)
Legal basis: Article 5(3) of the ePrivacy Directive (consent) and Article 6(1)(a) of the GDPR (consent). Consent required: yes. By default, no analytical cookie is placed: audience measurement is only activated after your explicit acceptance (see section 6, Google Consent Mode v2).
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| _ga | Google — Google Analytics 4 (first-party cookie placed by the Google script; data transmitted to Google) | Statistically distinguishes visitors in order to measure the audience and usage of the site. Placed only after your consent. | Analytical | 13 months |
| _ga_<ID> | Google — Google Analytics 4 (first-party cookie placed by the Google script; data transmitted to Google) | Maintains the state of the audience-measurement session. Placed only after your consent. | Analytical | 13 months |
Trackers that bloo.Cards does NOT use to date
To be perfectly transparent, we specify that bloo.Cards does not currently deploy:
- marketing or advertising cookies;
- remarketing or targeted advertising;
- social media pixels (for example Meta / Facebook Pixel);
- "in-house" analytics cookies (internal behavioural profiling);
- automated profiling based on cookies alone.
Should any of these uses be introduced in the future, this policy would be updated and your prior consent would be sought, category by category.
Summary of trackers
| Category | Trackers | Mechanism | Consent |
|---|---|---|---|
| Essential | PHPSESSID, bloo-consent | Cookies (first party) | No |
| Functional | bloo-lang, bloo-theme | localStorage (first party) — see section 3 | No (interface preference, without personal data) |
| Analytical | _ga, _ga_<ID> (Google Analytics 4) | Cookies (placed after consent, refused by default) | Yes |
| Marketing / advertising / social media | None (not used to date) | — | — |
3. Browser local storage (localStorage)
bloo.Cards uses localStorage to store two interface preferences. This is indeed local storage, not cookies: these values remain on your device, are not automatically transmitted to the server and contain no data enabling you to be identified.
| Key | Storage type | Purpose | Content | Duration |
|---|---|---|---|---|
| bloo-lang | localStorage (first party) | Stores the display language you have chosen (fr, nl, en, de, it, es, pt). | Language code (2 characters) | Until manually erased (browser settings) |
| bloo-theme | localStorage (first party) | Stores your display preference (light or dark theme). | Value "light" or "dark" | Until manually erased (browser settings) |
These two keys are recorded only following an action on your part (choice of language or theme), for purely functional purposes, and contain no personal data. You can erase them at any time by clearing your browser's site data (see section 8).
4. Third-party and integrated partner cookies
Certain features rely on third-party services that may place their own cookies. The placing of these cookies depends either on your consent or on the use of an optional feature by the card holder.
Google Analytics 4
When: only after your consent to analytical cookies. Role: Google acts as a processor for audience measurement. The data may be transferred to the United States, on the basis of the EU-US Data Privacy Framework and appropriate safeguards. Cookies concerned: _ga, _ga_<ID> (see section 2).
Google Maps / Google Places / Google Reviews (optional integrations)
When: only if a card holder has chosen to integrate a Google Maps map, a Google Places location or their Google reviews, and a visitor displays that integration: a Google Maps map only loads after a click on "Show the Google map" (without a click, only a frame hosted by bloo.Cards and a link to Google Maps are displayed); that click constitutes consent. In this case, Google may place its own cookies (for example NID) in accordance with its privacy policy. In the absence of such an integration on the card consulted, no Google Maps/Places cookie is placed.
Mollie (payments)
When: when going through the payment gateway (subscription or renewal of a subscription). Mollie may place its own security and transaction-tracking cookies, on its domain, in accordance with its cookie policy. bloo.Cards does not store payment card numbers.
| Third party | Integration | Possible cookies | Trigger |
|---|---|---|---|
| Google Analytics | Audience measurement | _ga, _ga_<ID> | After analytical consent |
| Google (Maps, Places, Reviews) | Optional, integrated by the card holder | NID, other Google cookies | Only if the integration is present and displayed |
| Mollie | Subscription payment | Security / transaction cookies (Mollie domain) | Only during payment |
5. Legal bases
ePrivacy Directive — Article 5(3)
The placing and reading of information on your terminal equipment are only permitted with your prior and informed consent, except where they are strictly necessary for the provision of a service that you have expressly requested. This is the main applicable basis for cookies.
Belgian Act of 13 June 2005 (Article 129)
This Act on electronic communications transposes the ePrivacy Directive into Belgian law. It requires prior consent for access to terminal equipment, except for trackers strictly necessary for the operation of the service.
GDPR (Regulation (EU) 2016/679)
- Article 6(1)(a) — Consent: basis for the processing of data from analytical cookies.
- Article 6(1)(f) — Legitimate interest: basis for essential cookies (session, security, storing the consent choice).
- Articles 12 to 14 — Transparency: clear information on the identity of the controller (Molderez-Consult SRL), the purposes, the legal bases and your rights.
Summary table of legal bases
| Category | ePrivacy basis | GDPR legal basis | Consent |
|---|---|---|---|
| Essential cookies | Art. 5(3) — exemption (strictly necessary) | Art. 6(1)(f) — legitimate interest | No |
| Functional localStorage (bloo-lang, bloo-theme) | Art. 5(3) — user-initiated interface preference, without personal data | Not applicable (no personal data) | No |
| Analytical cookies | Art. 5(3) — consent required | Art. 6(1)(a) — consent | Yes |
6. Consent management
Consent banner
On your first visit, a banner appears before any non-essential cookie is placed. It offers explicit choices:
- Accept — authorises analytical cookies (in addition to essential cookies);
- Refuse — only essential cookies are used;
- Customise — allows a granular choice by category.
No box is pre-ticked and no analytical cookie is placed until you have given your agreement.
Google Consent Mode v2 (refused by default)
Google Analytics 4 (Google Ireland Ltd) is only loaded after you accept. As long as you have not made a choice, or if you refuse, no Google Analytics script is loaded and no data is sent to Google for audience measurement. Your acceptance applies only to audience measurement (analytics_storage): Google's advertising signals (ad_storage, ad_user_data, ad_personalization) remain refused and your data is not used for advertising. Google Consent Mode v2 is set to "refused" by default, everywhere.
Recording and withdrawal of consent
- Recording: your choice (acceptance or refusal of audience measurement) is stored in the bloo-consent cookie (root domain) and in your browser's local storage.
- Duration: 6 months, after which your consent is requested again.
- Withdrawal: you can change or withdraw your consent at any time, as easily as you gave it, via the "Manage cookies" link at the bottom of every page (website and cards), which reopens the choice panel. Withdrawal immediately stops audience measurement and deletes the _ga and _ga_<ID> cookies from our domains; it does not affect the lawfulness of processing carried out before withdrawal.
No "cookie wall"
bloo.Cards does not make access to its services or the consultation of public cards conditional on acceptance of non-essential cookies. You can refuse analytical cookies and continue browsing normally.
7. Your rights and your control
In accordance with the GDPR, you have the following rights over any personal data processed via cookies:
- Right of access (Art. 15) — obtain confirmation and a copy of the data concerning you;
- Right to rectification (Art. 16) — correct inaccurate data;
- Right to erasure (Art. 17) — request the deletion of your data, subject to legal retention obligations;
- Right to restriction (Art. 18) — restrict certain processing;
- Right to data portability (Art. 20) — receive your data in a structured, machine-readable format;
- Right to object (Art. 21) — object to certain processing;
- Automated decision-making (Art. 22) — bloo.Cards carries out no automated profiling based on cookies alone.
Withdrawal of consent
You can withdraw your consent to cookies at any time via the "Manage cookies" link (footer). Analytical cookies then cease to be used. The withdrawal of consent does not affect the lawfulness of the processing carried out before that withdrawal.
Exercising your rights
To exercise your rights, write to privacy@blcrds.com. We respond within 30 calendar days (extendable to 60 days for complex requests), in accordance with Article 12 of the GDPR.
8. Disabling cookies from your browser
You can manage or delete cookies at any time via your browser settings. Disabling essential cookies may, however, log you out or disrupt the operation of the site.
- Google Chrome: Settings → Privacy and security → Cookies and other site data. Help Chrome
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data. Help Firefox
- Apple Safari: Settings → Safari → Privacy (or Preferences → Privacy on Mac). Help Safari
- Microsoft Edge: Settings → Cookies and site permissions. Help Edge
Clearing your browser's "site data" also erases local storage (localStorage), and therefore your language (bloo-lang) and theme (bloo-theme) preferences.
9. Contact
Data controller
Molderez-Consult SRL, Square Valère-Gille 13 box 5, 1050 Ixelles, Belgium. BCE / VAT: BE 0842.262.084.
Privacy contact point
For any question relating to the protection of your data or to cookies: privacy@blcrds.com.
No Data Protection Officer (DPO) is legally required within the meaning of Article 37 of the GDPR; a dedicated privacy contact point is nevertheless made available to you at the address above.
Legal and compliance contact
Legal and compliance requests: legal@blcrds.com. General contact: hello@blcrds.com.
Supervisory authority
If you consider that your rights are not being respected, you may lodge a complaint with the Belgian supervisory authority:
Data Protection Authority (APD), Rue de la Presse 35, 1000 Brussels, Belgium. E-mail: contact@apd-gba.be — Telephone: +32 (0)2 274 48 00 — Website: www.autoriteprotectiondonnees.be.
10. Language and language primacy
The French version is the legal and original version; the NL/DE/EN versions are courtesy translations; in the event of any discrepancy, the French version prevails.
11. Change history
| Date | Version | Changes |
|---|---|---|
| 23 September 2026 | 3.1 | Audience measurement loaded only after acceptance (no data sent to Google before the choice or after a refusal); Google advertising signals refused; actual inventory (bloo-consent, _ga and _ga_<ID>, 13 months); withdrawal via "Manage cookies" on the website and cards; single banner on cards; Google Maps maps loaded on click. |
| 17 September 2026 | 3.0 | Compliance revision: inventory aligned with the trackers actually deployed (removal of non-installed trackers — "in-house" analytics, marketing, remarketing, social media pixels); cookie / localStorage distinction (bloo-lang, bloo-theme); description of Google Consent Mode v2 (refused by default); correction of the Belgian legal bases (Act of 13 June 2005, Art. 129); update of contacts; addition of the language primacy clause. |
| 4 April 2026 | 2.0 | Detailed inventory, ePrivacy/GDPR sections, granular consent management. |
| 25 February 2026 | 1.0 | Initial version, launch of bloo.Cards. |