1. Scope
This policy explains how BandWagon, operated by Harrison Ward Technology, uses cookies, browser storage, service workers, device permissions, and similar technologies. It supplements the Privacy Policy.
2. Your Controls
On first visit, BandWagon offers three equally available choices: accept optional functional storage, reject optional storage, or manage preferences. Essential technology remains active because the requested service cannot be securely provided without it. Rejecting optional storage does not prevent sign-in, form submission, or core ride coordination.
Your preference is stored for 12 months in this browser. You may change it at any time through Cookie preferences in the site footer. Clearing browser data removes the saved choice and BandWagon will ask again. A material change in categories, purposes, or providers will also trigger a new choice.
3. First-Party Cookies
| Name | Category and purpose | Typical duration |
|---|---|---|
bw_session | Essential. Authenticates the signed-in user, protects the account, and authorizes requested application functions. It is configured as HttpOnly, Secure in production, and SameSite=Lax. | Configured from 1–90 days; normally 30 days, subject to server-side idle expiration and revocation. |
bw_support | Essential. Protects temporary, explicitly authorized administrator support-mode sessions. It is configured as HttpOnly, Secure in production, and SameSite=Strict. | 5–60 minutes; normally 30 minutes. |
bw_privacy_preferences | Essential. Records the policy version, timestamp, and whether this browser allowed optional functional storage so BandWagon can honor the choice. | 12 months. |
4. Cloudflare Turnstile
Public forms use Cloudflare Turnstile to distinguish legitimate users from automated abuse. It may process security signals such as IP address, browser/device characteristics, challenge results, and short-lived identifiers. BandWagon treats this as essential security technology and does not use it for advertising. Form entries are sent to BandWagon only when the user submits the form.
If Cloudflare pre-clearance is enabled for a protected hostname, Cloudflare may issue a security cookie such as cf_clearance. That cookie is limited to bot and access-control protection. See Cloudflare's Privacy Policy (opens in a new tab).
5. Optional PWA Storage
When functional storage is allowed, BandWagon registers a service worker and caches only the public offline page, web app manifest, and application icons. It does not intentionally cache authenticated pages, ride details, addresses, messages, form entries, or API responses. Rejecting optional storage prevents automatic registration and removes unused BandWagon offline caches where the browser permits.
6. Push Notifications
Push notifications are separate from cookie consent. BandWagon requests browser notification permission only after a user selects the enable action. If enabled, the browser creates a device subscription containing an endpoint and encryption keys. The user may disable push in BandWagon and in browser/device settings. A service worker may remain active when necessary to honor an existing push subscription requested by the user.
7. Hosted Payments and Connected Services
Support payments redirect to Stripe-hosted Checkout. Stripe controls technology used on its own domain under its privacy and cookie disclosures. Google and Microsoft calendar connections use explicit authorization; OAuth credentials are protected server-side and are not stored as BandWagon browser cookies.
8. No Analytics or Advertising Tracking
BandWagon does not currently use Google Analytics, Meta Pixel, behavioral advertising, cross-site profiling, heatmaps, session replay, or similar browser tracking. Server-side operational counts and security logs are used to operate and protect the platform, not to follow users across unrelated services.
BandWagon will not add optional analytics or advertising technology under an existing functional-storage choice. A future addition requires an updated disclosure, a new policy version, prior consent where required, and an equally accessible rejection option.
9. Browser Controls and Global Privacy Signals
Users may also block or delete cookies and site data through browser settings. Because BandWagon does not sell personal information or use data for targeted advertising, there is no sale or targeted-advertising processing to opt out of. BandWagon treats supported Global Privacy Control signals as an instruction not to enable any future sale, sharing, or targeted-advertising processing for that browser.
10. Contact
Questions or requests about cookies and browser storage may be submitted through the Help Center using the Privacy Request topic or by email to [email protected].