Cookies on blackbox.md and app.blackbox.md
Which cookies we use, what they are for, how long they are kept, and what the buttons in the cookie banner mean.
On this page
The blackbox.md website and the app.blackbox.md panel use only technical cookies: they keep you signed in and remember a few settings. On your first visit to blackbox.md, the “Cookies” banner appears in the bottom-left corner. The official text is in the “Cookie-uri” (Cookies) section of the Privacy Policy (blackbox.md/info/privacy; in the website footer, click “Politică de confidențialitate” (Privacy policy)).
Available to: any visitor to blackbox.md and any customer who uses the app.blackbox.md panel. You don't need an account.
The blackbox.md website is available in Romanian and Russian; this article quotes the Romanian labels with their English meaning.
The “Cookies” banner
The banner appears on blackbox.md pages, in Romanian and in Russian, until you click one of its buttons. There is no banner in the app.blackbox.md panel.
- Read the banner text: “Folosim doar cookie-uri tehnice și de sesiune, necesare pentru autentificare și funcționarea site-ului.” (We use only technical and session cookies, which are needed for signing in and for the website to work.)
- Click “Accept” or “Refuz” (Decline).
- The banner closes. Your choice is saved in this browser, and the banner no longer appears on the Russian version of the website either.
| Button | What happens |
|---|---|
| “Accept” | The banner closes. The website works normally. |
| “Refuz” (Decline) | The banner closes. The website works the same as after “Accept”. |
Note BLACKBOX does not use optional cookies, so “Refuz” has nothing to turn off. The session cookies in the table below are set anyway when you sign in: without them, you could not sign in to your account.
Which cookies we use
Each cookie appears only when you use the feature it belongs to. For example, the session cookie appears only after you sign in.
| What it is for | Where | When it appears | How long it is kept |
|---|---|---|---|
Account session (bx_session) |
blackbox.md | When you sign in, including with Google or GitLab, and when you create an account | 8 hours. Deleted when you click “Deconectare” (Sign out). |
| Securing sign-in with Google or GitLab | api.app.blackbox.md | When you click “Google” or “GitLab” on the sign-in or sign-up page | 10 minutes |
| Panel session | app.blackbox.md | When you enter the panel | 8 hours. Deleted when you click “Logout”. |
| 2FA step | app.blackbox.md | When you sign in with 2FA enabled, while you enter the code | 5 minutes |
| Remembered device after 2FA | app.blackbox.md | Only if you select “Remember this device for 30 days” | 30 days |
| Panel language | app.blackbox.md | When you click “EN”, “RO” or “RU”, or enter the panel from blackbox.md | 1 year |
- Sessions last 8 hours from sign-in. Activity does not extend them. Each time you enter the panel from blackbox.md, a new 8-hour session starts.
- The blackbox.md session cookie is valid only on blackbox.md. That is why the panel has its own session: Opening the app.blackbox.md panel from your account.
- The Google or GitLab cookie is set by the BLACKBOX sign-in service (api.app.blackbox.md), which both blackbox.md and the panel use. It confirms that sign-in finishes in the same browser where it started. If more than 10 minutes pass, start signing in again: Signing in with Google or GitLab.
- You have 5 minutes to enter the 2FA code. Details about the remembered device: Two-factor authentication (2FA) in the panel.
What your browser stores besides cookies
A few settings are saved in your browser's memory (the site's local storage), not in cookies. They stay on your device and are not sent to BLACKBOX.
| Site | What is stored |
|---|---|
| blackbox.md | The theme you chose with the button in the header (light, dark or system) and your choice in the “Cookies” banner |
| app.blackbox.md | The theme you chose with the moon or sun button, and the state of the side menu (collapsed or not) |
This data stays until you delete it from your browser. The language of the blackbox.md website is not saved in the browser: it is part of the page address (the Russian version starts with blackbox.md/ru). Panel language and theme: Panel interface: menu, top bar and language.
No analytics, advertising or tracking
No third-party traffic analytics, advertising or tracking scripts run on blackbox.md or in the app.blackbox.md panel. We do not use marketing cookies.
When you pay by card, you are redirected to the Paynet page. When you sign in with Google or GitLab, you go to that provider's page. These are separate websites, with their own cookie rules.
What happens if you clear your cookies
| What you clear | Effect |
|---|---|
| blackbox.md cookies | You are signed out of blackbox.md and need to sign in again. |
| app.blackbox.md cookies | You are signed out of the panel. The remembered-device checkbox is canceled, so the panel asks for the 2FA code again. The language you chose is lost: the app.blackbox.md/login page opens in English until you choose another language, and when you enter from blackbox.md, the panel takes the website's language. |
| Site data (local storage) | The “Cookies” banner appears again, and the theme goes back to your device's theme. |
If your browser blocks cookies completely, you cannot stay signed in on blackbox.md or in the panel. Allow cookies for blackbox.md and its subdomains (for example, app.blackbox.md).
Security Clearing cookies signs you out only in that browser. To end panel sessions on other devices, use “Settings” → “Sessions” → “Sign Out Everywhere”. For blackbox.md, change your password: Changing your account password.
Frequently asked questions
I clicked “Refuz” (Decline). Can I use my account and the panel? Yes. “Refuz” changes nothing in how the website works: signing in, orders and the panel all work the same.
How do I change my choice in the banner? In your browser settings, delete the cookies and site data for blackbox.md. The banner appears again on your next visit. This also signs you out of blackbox.md.
Why do I have to sign in again even though I didn't sign out? The blackbox.md session and the panel session each last 8 hours and are not extended while you work. Details: Signing in to blackbox.md and signing out.
I selected “Remember this device for 30 days”, but the panel asks for the 2FA code again. Why? For example, 30 days have passed, you entered from a different browser, you cleared your cookies, or you used “Sign Out Everywhere” in the panel; sometimes a browser update also cancels the checkbox. The checkbox works only when you enter the panel from blackbox.md: Two-factor authentication (2FA) in the panel.
Where can I find the official text about cookies?
In the Privacy Policy, in the “Cookie-uri” (Cookies) section: https://blackbox.md/info/privacy. A summary of the policy: Privacy policy in brief.