Cookie Policy.

If a cookie is on this page, it does what the page says. If a cookie is not on this page, we are not setting it.

Plainly stated.

• A small set of cookies. Each one has a stated job.
• Plausible Analytics is cookie-less by design; aggregate page-view counts and anonymous interaction events only.
• Yandex Metrika also runs sitewide for analytics, including click/mouse heatmapping and session recording, and sets its own cookies; it is named in full in Section 5.
• No advertising trackers or retargeting pixels, and no device fingerprinting.
• We do not sell cookie data; we do not infer your identity across services outside the Bitcitizen ecosystem.
• We aim to honor the Global Privacy Control (GPC) browser signal for the analytics providers that support it.

The clauses below are the binding text. If a line ever conflicts with this summary, the binding text governs.

1. Introduction

This Cookie Policy explains how cbi.vu, a service operated by Bitcitizen LLC ("Bitcitizen," "we," "us," or "our"), uses cookies and similar technologies on the cbi.vu website located at cbi.vu (the "Website"). This Policy works alongside our Privacy Policy and Terms of Service. For matters not addressed here, the Bitcitizen LLC Privacy Policy applies.

2. What cookies are

A cookie is a small piece of text placed on your device when you visit a website. Cookies let the site remember information about your visit: authentication state, language preferences, analytics events, and similar functional data. Similar technologies include local storage, session storage, pixels, and server-side identifiers. This Policy applies to all of them.

Cookies are either first-party (set by cbi.vu directly) or third-party (set by a service we use, such as our scheduling provider). We identify the specific third parties involved in Section 5.

3. Cookies we use

We group the cookies we set into three categories. Each is listed with its purpose and the approximate retention period.

3.1 Necessary cookies

cbi.vu sets no necessary cookie. Cross-site request forgery protection on form submissions (the Vanuatu Brief request and the booking screener) is enforced server-side: each request's Origin header is checked against cbi.vu's own domain. No cookie is set or read for this purpose.

3.2 Analytics

We use two analytics providers with different footprints. Plausible Analytics is cookie-less by design. Yandex Metrika is not: it sets its own cookies and records session activity, including mouse movement and click heatmaps, so we can see how the Website is actually used. Both are described in full below and in Section 5.

• Plausible page-view analytics: no cookies set. Aggregate counts retained for up to 14 months on Plausible’s EU-hosted infrastructure.
• Yandex Metrika (_ym_* cookies): sitewide analytics operated by Yandex, including session recording (a replay of on-page activity) and click/mouse-movement heatmapping, used to understand how visitors use the Website. Sets first-party _ym_uid, _ym_d, and related cookies, generally retained for up to 12 months. Processed by Yandex, headquartered in Russia; see Section 5 for the cross-border detail.
• Performance telemetry (Core Web Vitals): records page-load and Core Web Vitals metrics aggregated through our own analytics endpoint. No third-party advertising or fingerprinting identifier is set; any first-party cookie used for sampling continuity is short-lived and retained for up to 30 days.

3.3 Functionality cookies

These cookies remember preferences that make the Website more useful to you on return visits.

• Tool-state storage: saves your in-progress Bitcoin-calculator and form inputs locally so you can pick up where you left off. Stored in local storage on your device; not transmitted to our servers unless you submit.
• Display preferences: remembers your currency unit toggle (USD, BTC, sats) and any sidebar state.

4. Cookies we do not use

Stating the absence as clearly as the presence. We do not run:

• Advertising or retargeting cookies.
• Cross-site tracking pixels (Facebook Pixel, TikTok Pixel, LinkedIn Insight Tag, and similar).
• Device fingerprinting or probabilistic identification.
• Data brokers or data-enrichment services keyed to cookie identifiers.

Session recording and click/mouse heatmapping are in use, through Yandex Metrika. That is covered in Sections 3.2 and 5, not here, so this list stays honest about what it is: things we do not do.

We do not sell, rent, or license cookie data to third parties. We do not use cookies to infer your identity across services outside the Bitcitizen ecosystem.

5. Third-party services

A limited set of third-party services may set cookies on pages where their functionality is present. Each is listed with the role it serves and a link to its own privacy policy.

• Calendly: scheduling, on the booking page only. Sets cookies to manage the booking widget and your session with it. Policy: calendly.com/privacy.
• Stripe: card-payment processing, where a card payment is offered. Cookies, where set, are payment-fraud-prevention cookies controlled by Stripe. Policy: stripe.com/privacy.
• Plausible Analytics: cookie-less by design; sets no cookies. Policy: plausible.io/privacy.
• Yandex Metrika: sitewide analytics, present on every page including this one. Sets _ym_* cookies and performs session recording and click/mouse heatmapping as described in Section 3.2. Yandex LLC is headquartered in Russia and processes this data; treat this as data leaving the EU/US processing environment used by our other providers. Policy: yandex.com/legal/confidential.

We do not embed social media widgets that set cookies on load. External links to X open in a new tab and are governed by that platform's own policy.

6. Managing cookies

You control cookies in three ways, in order of precision:

• Browser settings. Every major browser lets you view, block, and delete cookies on a per-site basis. Blocking cookies on cbi.vu will not break browsing or form submissions; only the booking widget may be affected. Plausible is cookie-less, so blocking cookies has no effect on it; blocking third-party cookies will also block Yandex Metrika's _ym_* cookies.
• Private or incognito browsing. Cookies set in a private window are deleted when the window closes.
• Operating-system level tools. Platforms like Brave, Firefox Focus, and Safari’s Intelligent Tracking Prevention will block third-party cookies and limit cross-site identifiers by default. We tested the Website against these configurations and it functions correctly.

Guidance from the major browser vendors is published by Chrome, Firefox, Safari, Edge, and Brave in their respective help centers.

7. Do Not Track and Global Privacy Control

We do not currently serve targeted advertising, so there is nothing to opt out of on that front. We have not built automated Global Privacy Control (GPC) handling into the Website: sending a GPC signal does not currently change what Plausible or Yandex Metrika load. Until that is built, the reliable way to limit analytics on cbi.vu is the browser and tracking-prevention controls described in Section 6, which do work against Yandex Metrika's cookies.

The legacy "Do Not Track" (DNT) browser signal is not a binding legal standard and is honored inconsistently across the industry. We do not set any advertising or cross-site tracking cookies regardless of DNT or GPC state; Yandex Metrika, described in Sections 3.2 and 5, is analytics, not advertising.

8. Changes to this policy

We update this Cookie Policy when the cookies we use change, when a third-party service is added or removed, or when applicable law changes. Material updates are reflected in the "Effective" date at the top of this page. Significant changes will also be announced in the footer or via a site-wide notice for a reasonable period. Historical versions of this Policy are retained internally and made available to regulators on request.

9. Contact

Questions about this Cookie Policy or the cookies we use can be directed to contact@cbi.vu. The operating entity is Bitcitizen LLC. For broader privacy questions, see our Privacy Policy. For the terms governing use of the Website and Services, see our Terms of Service.