Draft under legal review. This text is being reviewed by a lawyer and may change before it is final. Bracketed items are details still to be filled in.

Cookie Policy

Last updated 15 October 2026 About 2 min to read

Our own site and app use only what is needed to sign you in and remember your settings. Statistics cookies are used only if switched on and only after you agree. On our customers' websites, the Glai script stores one random id in standard mode and nothing at all in privacy mode.

1. What cookies and browser storage are

A cookie is a small file a website saves in your browser; local storage is a similar place for small values. Some are strictly necessary for a service you asked for, such as staying signed in, and need no consent. Others, such as statistics or advertising cookies, need your consent in many countries before they are set.

2. On Glai itself

These are used on our website and in the app. None is used for advertising, and none is shared with other websites.

Name	Type and purpose	Kept for	Category
auth	First-party cookie. Keeps you signed in: a short-lived access token, your profile and the workspace you last opened.	30 days, or until you sign out	Strictly necessary
refresh_token	First-party cookie, HTTP-only and same-site strict. Renews your sign-in without asking for your password again.	Your session length, or until you sign out	Strictly necessary
google_oauth_nonce	First-party cookie, HTTP-only. Protects the "Sign in with Google" step against forgery.	10 minutes	Strictly necessary
glai_theme	Local storage. Remembers light, dark or system mode.	Until you clear it	Preference (necessary for the setting you chose)
glai_consent	Local storage. Remembers whether you accepted or declined statistics cookies, so we do not ask again.	12 months	Strictly necessary
_ga, _ga_<id>	Google Analytics cookies, set by Google on our marketing pages. Count visits to our website.	Up to 2 years	Statistics: only if switched on and only after you accept

Google Analytics is currently switched off. If we switch it on, a banner will ask for your consent first and nothing is loaded from Google until you accept. Our hosted signup forms are never measured.

3. On websites that use Glai

Our customers add the Glai script to their own websites. What it stores depends on the mode the website owner chose:

Mode	What is stored on the visitor's device	Kept for
Standard	glai_vid: a random id in a first-party cookie and in local storage, used to recognise a returning visitor on that one website. It is never shared between websites and holds nothing about the person.	1 year
Privacy (daily)	Nothing. Visits are counted with a daily hash made on our servers, which changes every day.	Not applicable

The script sets no third-party cookie and no advertising cookie. The website owner decides whether to ask for consent before loading it in standard mode, and its own cookie notice should say so. To ask about a website's analytics, contact that website.

4. How to control them

On our website, use "Cookie settings" in the footer, or the button on this page, to change your choice at any time.
Every browser lets you block or delete cookies and local storage in its settings. Blocking the strictly necessary ones signs you out and stops the app from working.
Browser privacy features and content blockers may stop the analytics script on other websites from loading at all.
Turning on "Do Not Track" or "Global Privacy Control" does not change anything here: Glai does no cross-site tracking and sells no data, so there is nothing for those signals to opt out of.

5. Changes and contact

We will update this page when we add, remove or change a cookie, and change the date at the top. The Privacy Policy explains how we handle personal data in general.

Questions about this page: hello@glai.io. Related: Privacy · Terms · Cookies · Data processing.