Cookie Policy
This Cookie Policy explains how NextPhase Labs LLC (d/b/a BLOC) uses cookies and similar tracking technologies on ridewithbloc.com and our mobile application. Read this alongside our Privacy Policy.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website. In addition to cookies, we may use:
- Web beacons (tracking pixels): tiny images in web pages or emails that track interactions
- Local storage: data stored directly in your browser, used by tools like PostHog for session continuity
- Session storage: temporary data deleted when you close your browser
- First-party scripts: JavaScript loaded directly by our site to collect analytics and usage data
2. Types of Cookies We Use
2.1 Strictly Necessary
Essential for our website to function. Cannot be switched off. Set in response to your actions (loading pages, submitting forms). These are primarily set by our infrastructure providers, Cloudflare and Vercel.
2.2 Functional
Allow our website to remember choices you make and provide enhanced features. Do not track browsing on other sites.
2.3 Analytics
Help us understand how visitors interact with our website. We currently use Google Analytics and PostHog for this purpose. Data is used to improve our platform, track feature usage, and understand user flows.
2.4 Marketing
Track browsing habits to show relevant advertising on other websites and platforms. Set by third-party advertising networks with our permission. (Not currently active — will be disclosed here before activation.)
3. Specific Cookies and Technologies We Use
The following table describes the cookies and tracking technologies currently active on ridewithbloc.com, organized by the tool that sets them.
Cloudflare (Infrastructure & Security)
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
__cf_bm |
Strictly Necessary | Bot management — distinguishes humans from automated traffic | 30 minutes |
cf_clearance |
Strictly Necessary | Records successful challenge completion to bypass future security checks | 1 year |
_cfuvid |
Strictly Necessary | Rate limiting and abuse prevention for Cloudflare Workers | Session |
Cloudflare processes all traffic to ridewithbloc.com at the network level. These cookies are set automatically and cannot be disabled without affecting site functionality. See Cloudflare's Cookie Policy.
Vercel (Hosting)
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
_vercel_no_cache |
Strictly Necessary | Controls Vercel's edge caching behavior | Session |
Vercel hosts our frontend. Request logs (including IP addresses) are processed by Vercel infrastructure. See Vercel's Privacy Policy.
Google Analytics (Web Analytics)
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
_ga |
Analytics | Distinguishes unique users by assigning a randomly generated client ID | 2 years |
_ga_<ID> |
Analytics | Stores and counts page views for a specific GA4 property | 2 years |
_gid |
Analytics | Distinguishes users; refreshed every 24 hours | 24 hours |
_gac_<ID> |
Analytics / Marketing | Stores campaign-related information (if Google Ads linked) | 90 days |
Google Analytics collects page views, session duration, traffic sources, device/browser information, and approximate geographic location (city level). IP addresses are anonymized before storage. Data is processed by Google LLC. See Google's Privacy Policy and Google Analytics Data Practices.
CCPA Note: Sharing identifiers with Google Analytics may constitute "sharing" of personal information under CCPA. California residents may opt out via the controls in Section 5.
PostHog (Product Analytics)
| Cookie / Storage | Category | Purpose | Duration |
|---|---|---|---|
ph_<project_key>_posthog (local storage) |
Analytics | Stores PostHog user ID and session state for event tracking continuity | Persistent |
__ph_opt_in_out_<key> |
Functional | Records user opt-out preference for PostHog tracking | 1 year |
PostHog tracks user events (button clicks, page views, feature interactions, form submissions), session recordings, and funnel data to help us improve our product. Data is processed by PostHog, Inc. See PostHog's Privacy Policy.
PostHog primarily uses local storage rather than cookies. You can opt out of PostHog tracking using the opt-out control in Section 5 or by contacting us at [email protected].
Resend (Email Tracking)
| Technology | Category | Purpose | Duration |
|---|---|---|---|
| Email open pixel | Functional | Detects whether a recipient has opened an email we sent | N/A (server-side log) |
| Click tracking links | Functional | Records whether links in our emails were clicked | N/A (server-side log) |
Email tracking is performed server-side by Resend and does not place cookies in your browser. You can disable email tracking by turning off image loading in your email client. See Resend's Privacy Policy.
First-Party Functional Cookies
| Cookie | Category | Purpose | Duration |
|---|---|---|---|
bloc_session |
Strictly Necessary | Maintains your logged-in session | Session |
bloc_csrf |
Strictly Necessary | Prevents cross-site request forgery attacks | Session |
bloc_referral |
Functional | Stores your referral code to attribute signup credit | 30 days |
bloc_prefs |
Functional | Remembers display preferences (e.g., cookie consent choice) | 1 year |
4. Coming Soon — Providers Not Yet Active
The following providers will be integrated upon platform launch. Their cookies and tracking technologies will be disclosed in detail in this policy before activation.
| Provider | Role | Status |
|---|---|---|
| Stripe, Inc. | Payment processing | Pre-launch — not yet active |
| Twilio, Inc. | SMS communications | Pre-launch — not yet active |
| Checkr, Inc. | Driver background screening | Pre-launch — not yet active |
5. Your Cookie Choices
5.1 Cookie Consent Banner
When you first visit our website, a consent banner allows you to accept all cookies, reject non-essential cookies, or customize your preferences. Your selection is saved for future visits.
5.2 Opt Out of Google Analytics
You can prevent Google Analytics from collecting your data by:
- Installing the Google Analytics Opt-Out Browser Add-on
- Using Google's Ad Settings to limit data use
- Enabling "Limit ad tracking" on your mobile device
5.3 Opt Out of PostHog
You can opt out of PostHog event tracking by:
- Clicking the opt-out link in our cookie consent banner
- Emailing [email protected] with subject "PostHog Opt-Out"
- Clearing your browser's local storage (this resets PostHog's user ID)
5.4 Browser Settings
Manage cookies through your browser:
- Chrome: Settings > Privacy and Security > Cookies and other site data
- Firefox: Settings > Privacy & Security > Cookies and Site Data
- Safari: Settings > Safari > Privacy & Security
- Edge: Settings > Privacy, search, and services > Cookies
5.5 Do Not Track
Our website does not currently respond to DNT signals, but opt-out controls in Sections 5.2–5.4 are available.
6. Impact of Disabling Cookies
Disabling strictly necessary cookies (Cloudflare, Vercel, session cookies) will break core site functionality including form submissions and page loading. Disabling analytics cookies (Google Analytics, PostHog) will not affect your ability to use our website or waitlist.
7. California Privacy Rights (CCPA)
California residents may have the right to opt out of the sharing of personal information via analytics cookies and tracking technologies under CCPA/CPRA. To opt out, use the controls in Section 5 or contact [email protected].
8. Updates to This Policy
We will update this Cookie Policy before adding any new tracking technology or activating any pre-launch provider listed in Section 4. The updated policy will be posted with a revised effective date and you will be notified of material changes.