CookiePolicy.

Trackgleam uses only the cookies it needs to work. There are no advertising cookies, no cross-site trackers, and no third-party analytics cookies on trackgleam.org. Because every cookie we set is essential, there is no cookie banner to click through.

The cookies we set

• Session token. Keeps you signed in to the app. HTTP-only and secure, so page scripts cannot read it. Lasts: Up to 30 days, or until you log out.
• CSRF token. Protects sign-in and account forms from cross-site request forgery. Lasts: Your browser session.
• Callback address. Remembers which page to return you to after sign-in. Lasts: Your browser session.

These cookies are only set once you sign in or start signing in. Browsing the marketing pages without an account sets none of them.

Local storage

The app may save small preferences in your browser, such as which kit tab you had open, so the page looks the way you left it. This stays on your device and is not used to track you.

Payments

When you upgrade, checkout happens on Stripe's own pages, and Stripe may set its own cookies there to prevent fraud. Those are governed by Stripe's policies.

Your choices

You can block or delete cookies in your browser settings at any time. If you block the session cookie, you will not be able to stay signed in to the app, but the public pages will still work.

Questions

See our Privacy Policy or email privacy@trackgleam.org.