Cookie Notice
Last updated September 10, 2026 · version 2026-09-10
Every cookie and tracker on galaxyunit.app, in three groups. Nothing optional runs until you say so, and saying no is one tap, the same as saying yes.
Where this applies
This notice covers the public website, sign-up, sign-in and the setup wizard. Inside the product itself there are no analytics or advertising trackers at all — your customers, jobs and money are never shown to an ad network. That promise is in the Privacy Policy.
Necessary — always on
| Name | What it does | Lasts |
|---|---|---|
gu_consent | Remembers the choice you made on the banner. | 180 days |
gu_first_touch | A note of where your first visit came from: the referring site’s name, any utm_ tags in the link, the first page you opened. If you create an account it is stored with your business so we know which channel brought you. Never shared. | 90 days |
sb-… | Sign-in session and security, set by our authentication provider when you sign in. | Session, renewed while you use the product |
We also use Vercel Web Analytics, which sets no cookie and identifies no one; it counts page views in aggregate.
Analytics — only if you accept
Loaded through Google Tag Manager after you accept this group: Google Analytics and Microsoft Clarity — which pages are read, how far people scroll, where they get stuck (heatmaps and anonymised session recordings). IP addresses are anonymised in Google Analytics. Recordings never include the product itself, and we do not put names, e-mails or record contents into analytics events.
Marketing — only if you accept
Loaded after you accept this group: Meta Pixel (Facebook and Instagram) and Google Ads. They tell the ad network whether an advertisement of ours led to a visit or a sign-up, so we can stop paying for ads that do not. Under some privacy laws this counts as “sharing” personal information for advertising; it happens only with your consent and you can withdraw it below.
Your choice, and changing it
The banner on your first visit offers Accept all, Necessary only and Customize. Until you choose, only the necessary group runs. Showing the banner is not consent; only your click is. If your browser sends the Global Privacy Control signal, we treat it as “Necessary only” without asking.
You can change your mind at any time:
Withdrawing applies from now on; it does not un-collect what an analytics or ad provider already received while you had accepted. To ask those providers to delete it, use their own controls.
When we add a tracker
A new analytics or advertising tool goes on this page and into the right consent group before it goes live. We do not list a tool we might use one day, and we do not leave one off that is running.