Eight cookies, and none of them watching you.
This site sets eight cookies: three that remember what you chose, your language, whether you folded the portal’s side menu and the customer and brand you last worked on, and five that sign you in to your portal, keep you there, and carry a new password to the screen that shows it. There are no third-party analytics and no advertising pixels, which is why there is no consent banner.
In effect from
The complete list.
Every cookie the site and the portal set, taken from the code itself. A new cookie has to appear in this table before it can be set.
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| gz_locale | Remembers the language you chose; not written unless you choose. | Twelve months | Preference — readable by the browser |
| gz_rail | Remembers whether you folded the portal’s side menu; not written unless you fold or unfold it. | Twelve months | Preference — readable by the browser |
| gz_scope | Remembers the customer and brand you last chose in the composer and the library, so they open where you left off; not written unless you choose. | Six months | Preference — not readable by the browser |
| gz_at | The short-lived access token for the portal. | Fourteen days for the cookie; the token inside expires in minutes and is renewed. | Necessary — not readable by the browser |
| gz_rt | The refresh token; replaced on every use. | Fourteen days | Necessary — not readable by the browser |
| gz_org | Names the active organisation for people who belong to more than one. | Fourteen days | Necessary — not readable by the browser |
| gz_id | A signed copy of your roles and the brands you may see, so that every page you open does not have to ask again. It is signed with your own session, so it is useless in anyone else’s browser. | Fourteen days for the cookie; the contents go stale in ninety seconds. | Necessary — not readable by the browser |
| gz_pw_once | Carries a newly created password or invitation link from the screen that made it to the screen that shows it, once, so that it is never in a web address and never in a server log. Administrators only. | Until the next page load | Necessary — not readable by the browser |
Why there is no consent banner
A consent banner exists to obtain permission for what is not necessary. We have nothing that is not necessary: no advertising tracking, no third-party measurement, no heat maps, and no identifier that follows you to other sites.
If we ever add something non-essential, an explicit consent request will come with it — and this page will have changed before it does, not after.
What we count, and what we cannot
We count how often each public page is read, and five things a visitor can do on one: send the enquiry form, open a workspace, order the audit, follow the WhatsApp link, and change language. It is recorded on our own servers, from our own domain.
Nothing is stored on your device to do it, and nothing recorded identifies you. There is no visitor identifier, so two page views cannot be joined into a person and never could be without changing the database. Your IP address is never written down — only the country our host has already resolved, and nothing at all when it cannot. The page address is stored without anything after the question mark, and a site that referred you is reduced to its name before it is kept.
That is why this is not something we ask permission for: there is nothing placed on your device to permit, and nothing kept that is about you rather than about a page. If your browser sends a Global Privacy Control or Do Not Track signal we do not count you at all. Neither signal governs measurement of this kind; we honour them because you asked, not because we were made to.
What this page does not load
- No external analytics script and no tag manager.
- No advertising pixel, and no social button that tracks whoever sees it.
- Fonts are downloaded at build time and served from our own domain, so your request never reaches a font provider.
- The content security policy restricts the page’s connections to our own origin.
The session cookies
The three portal cookies are set only after you sign in. They cannot be read by code running in the browser, so a script injection cannot steal them, and they are not sent with a request originating from another site.
The refresh token rotates on every use: two copies of it existing means one was stolen, so presenting a consumed copy revokes the whole session rather than being ignored.
The preference cookies
The language cookie is written only when you choose a language explicitly. Until you do, the page is served in Arabic and nothing is written.
The menu cookie is written only when you fold or unfold the portal’s side menu, and holds nothing but that choice. These two are the only cookies the browser can read, because neither is a credential.
How to control them
Every browser lets you delete and block cookies for a specific site. Deleting the session cookies signs you out immediately, deleting the language cookie returns the page to Arabic, and deleting the menu cookie opens the side menu again. Nothing else breaks.
We use no browser local storage and no device fingerprint as a substitute for cookies. The absence of a banner does not mean the tracking moved somewhere else.
Changes
If a cookie is added, or an existing one changes purpose, this page changes with it. The table above is the reference, not this paragraph.
The silence here is a position, not an oversight.
No consent banner is not a compliance gap; it is the consequence of a decision. A site that collects nothing unnecessary has nothing to ask permission for. Anyone showing you dozens of advertising partners in one dialogue is asking permission for something they could simply have chosen not to do.
Questions about this document, or a request about your own data: hello@grokerz.com