Cookie Policy
Galeira uses necessary cookies and browser storage to make the product work. Optional analytics tools load only after you choose analytics in the cookie banner. The marketing tag described below loads only after you choose marketing.
Necessary cookies and browser storage
| Name | Purpose | Expires |
|---|---|---|
auth_session | Keeps you signed in after you click a magic link. HttpOnly, Secure, SameSite=Lax. | 30 days |
NEXT_LOCALE | Remembers the language you chose so pages open in the right locale. Secure, SameSite=Lax; readable by the page so the language switcher works. | Up to 1 year |
event-unlock-<eventId> | Lets invited guests or password-approved visitors access a private event gallery without re-entering the password on every page. | Event-scoped, usually 24 hours |
g_state, apple_state, cloud state cookies | Short-lived OAuth security checks for Google, Apple, Google Drive, Dropbox, OneDrive, and Google Photos connections. | About 10 minutes |
gal_ref | Optional referral attribution if someone opens Galeira from a referral link and later creates an event. | Short-lived; deleted after event creation |
galeira-consent and galeira-analytics-consent | Browser localStorage records for your cookie-banner choice. These are not sent with every request like cookies. | Until you clear browser storage or change preferences |
galeira-theme | Browser localStorage preference for light or dark mode. | Until you clear browser storage or change theme |
cf_clearance | Set by Cloudflare, our security and content-delivery provider, once your browser passes a bot check. It is what stops you being challenged again on every page. This is the one cookie set before you answer the banner, because without it the site cannot be served to you at all. | Up to 1 year |
Optional analytics after consent
If you choose analytics in the cookie banner, Galeira loads the following tools. If you reject analytics — or simply never answer the banner — none of them load and none of their cookies are written.
- PostHog — product analytics, funnel events, and session replay with input masking. Sets a first-party cookie named
ph_phc_<project>_posthog(about 1 year) holding a random identifier. - Sentry — client-side error and performance monitoring, with PII scrubbing and consent checks. Sets no cookie.
- Microsoft Clarity — heatmaps and session replay on public marketing/conversion pages only. Sets the first-party cookies
_clck(about 1 year) and_clsk(1 day), and Microsoft additionally sets its own cookies onclarity.msandbing.com—MUID,ANONCHK,MR,SM, andSRM_B. - Google Analytics 4 — see the section below. It sets
_gaand_ga_S6Y90MFMZQ(both about 13 months) and is keyed to this analytics choice. - Cloudflare Web Analytics — a privacy-focused page-view count from
static.cloudflareinsights.com. It sets no cookie and builds no cross-site profile, but it is a third-party request, so we load it only after you choose analytics.
Server-side security, abuse prevention, payment, and operational logs may still run where they are strictly necessary to provide the service, protect users, or comply with law. Those are not advertising trackers.
Optional marketing after consent
If you choose marketing in the cookie banner, Galeira loads the Google Ads conversion tag on public marketing pages only. It measures whether an ad click led to a sign-up. If you reject marketing — or simply never answer the banner — the tag is not loaded at all and sets no cookie.
- Google Ads conversion tracking — sets a first-party
_gcl_aucookie (about 90 days) to attribute a conversion to the ad click that led to it. Loaded only after marketing consent, and only on public pages: never on the dashboard, an upload page, an invitation, or any other signed-in or guest-content surface.
Google Analytics and remarketing
Our Google Ads account is linked to a Google Analytics 4 property, which means the single Google tag we load also carries a GA4 destination (G-S6Y90MFMZQ) and Google’s remarketing hosts. Concretely, after you grant consent you may see _ga and_ga_S6Y90MFMZQ set for about 13 months, and requests to googletagmanager.com, pagead2.googlesyndication.com, doubleclick.net and google.com.
These are keyed to your banner choices through Google Consent Mode v2. Before you answer the banner, the Google tag loads on public marketing pages and sends Google one cookieless signal that a page was viewed: no cookie is set, no identifier is stored on your device, and nothing is kept that could recognise you on a later visit.
Google Analytics goes further still: until you actively choose analytics, we switch that property off entirely with Google’s own per-property opt-out, so it receives nothing at all — not even the cookieless signal. That is stricter than Consent Mode requires, and it applies whether you have declined analytics or simply not answered yet. Choosing analytics turns it on and sets _ga; choosing marketing enables advertising and remarketing measurement, which sets _gcl_au. Declining marketing means no_gcl_au and no doubleclick.net cookie. We never load any of this on the dashboard, an upload page, an invitation, or any other signed-in or guest-content surface.
What we do not use today
- No Meta Pixel.
- No social-media tracking pixels.
- No sale of personal data and no analytics use of uploaded photos, videos, voice messages, or face vectors.
Third-party services that may set cookies
- Stripe — when you visit a checkout page (only on the checkout page itself), Stripe sets its own cookies for fraud prevention. See Stripe's privacy notice.
- OAuth providers — Google, Apple, Dropbox, Microsoft, and similar providers may set their own cookies when you choose to sign in or connect a cloud account on their hosted consent pages.
Changing your choice
Use the cookie banner to accept all, reject non-essential cookies, or save a custom choice. Analytics and marketing are off by default until you choose otherwise.
You can change or withdraw your choice at any time using the Cookie preferences link in the footer of every page.
When you withdraw a category, we stop loading those tools straight away and delete the cookies they had set on this site — _ga, _ga_S6Y90MFMZQ, _gcl_au, _clck, _clsk and the PostHog cookie — along with PostHog’s matching browser-storage entry. Your sign-in, language and theme are untouched.
Two things we cannot remove for you, because they are not set on this site: the cookies Microsoft sets on clarity.ms and bing.com (MUID, ANONCHK, MR, SM, SRM_B) and test_cookie on doubleclick.net. Clearing cookies in your browser settings removes those.
You can clear the auth_session cookie by signing out (the “Sign out” button in your account menu) or clearing your browser cookies. The site won’t function as a signed-in user without it. Clearing browser storage also removes galeira-consent, so the banner will ask again.
Contact
Questions: privacy@galeira.com.