Four cookies. Here is what each one does.

BazPay runs payment tools, not an ad business. This page lists every cookie this site can place on your device. It gives the purpose, the lifetime and the legal basis for each one. Nothing here is shared with a broker, and nothing is sold.

Read it beside our privacy notice and terms. Together they cover how we handle merchant and shopper data across the gateway.

Three rules govern the register. They hold for the marketing site and the dashboard.

  • Four cookies, and that is the list

    We do not run ad networks on this site. No pixel, no remarketing tag, no data broker. The register below is the whole set.

  • Analytics stay off until you say yes

    Only strictly needed cookies load on your first visit. The counting cookie waits for your consent, and drops out if you decline.

  • Your choice is stored, not sold

    We keep one small cookie that records your answer. It holds a word, not a name. That is why we stop asking on the next page.

Every cookie this site can set. First-party only — all four come from bazpay.com.

Cookies set by BazPay, with purpose, lifetime and consent status.
Cookie Category Purpose Lifetime Consent
bzp_session Strictly needed Keeps you signed in to the merchant dashboard between clicks. Session — cleared when you close the browser Not required
bzp_csrf Strictly needed Blocks forged form posts on sign-in and payment screens. Session — cleared when you close the browser Not required
ledger_ack Consent record Stores your cookie answer, so the notice stops appearing. 12 months Not required
bzp_stat Analytics Counts page views in total. No name, no profile, no ad use. 6 months Opt-in

We set no third-party cookies here. No fonts, scripts or video come from another host, so no outside party can read this device through our pages. If that ever changes, the table changes first and the effective date moves with it.

Consent is not a one-time trap. Withdrawing it is as easy as giving it.

  1. Use the notice

    The consent slip sits bottom-left on your first visit. Approve both, or pick essential only. Both buttons carry equal weight.

  2. Change your mind

    Delete the ledger_ack cookie in your browser settings. The slip returns on the next page load and you can answer again.

  3. Block at the browser

    Chrome, Safari, Firefox and Edge all let you block or clear cookies per site. That setting overrides anything we do.

  4. Ask us directly

    Email our team for a written answer on what a named cookie stores. We reply inside one working month, as GDPR requires.

Strictly needed cookies
Set under the ePrivacy exemption. The site cannot sign you in without them, so consent is not required.
Analytics cookie
Set only on consent, under Article 6(1)(a) GDPR. Withdraw it at any time with no effect on your account.
Card data
Never held in a cookie. Card entry uses hosted fields inside our PCI DSS Level 1 scope, so a card number never touches this site.

More on our scope sits in the security and PCI DSS notes and the compliance hub.