Legal
Cookie Notice
This notice explains how Garasu uses cookies and similar storage on garasu.co. It sits with the Privacy Policy. Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, we need your consent before non-essential cookies.
Essential cookies run so the product works. Analytics (PostHog) and marketing (the X ads pixel) do not store a cookie until you accept them. If you reject analytics, PostHog still counts the visit with a hash that is not stored in your browser. Reject is as easy as accept.
to change your choice. We will ask again after 12 months.
What we mean by cookies
Cookies are small files stored by your browser. We also use localStorage (for this consent record) and first-party scripts that set identifiers. The table below covers both.
The cookies we use
| Name | Provider | Purpose | Type | Duration | Category |
|---|---|---|---|---|---|
sb-*-auth-token (and related sb- cookies) | Supabase | Keep you signed in and complete the auth callback. | First-party | Session / up to ~1 year (refresh) | Essential |
garasu_org_id | Garasu | Remember which organisation you last used in the app. | First-party | 1 year | Essential |
sidebar_state | Garasu | Remember whether the app sidebar is open. | First-party | 7 days | Essential |
garasu_cookie_consent_v1 | Garasu | Store your cookie choices so we can honour them on later visits. | First-party (localStorage) | Until you change it, or 12 months | Essential |
ph_*_posthog | PostHog | Tie page views together after you accept analytics. Not stored if you reject. A rejected visit is counted without this cookie. | First-party | 1 year, only after you accept analytics | Analytics |
twq / personalization_id (X Pixel o5gus) | X (Twitter) | Measure visits and sign-ups for ads on X. May be 'sharing' under US state privacy laws. | Third-party | Set by X | Marketing |
Categories
- Essential — required to sign in, keep your organisation selected, remember the sidebar, and remember this choice. These do not need consent.
- Analytics — PostHog, so we can see which pages and product screens are used. The analytics cookie stays off until you accept. If you reject, we do not store it, and the visit is counted without a browser identifier.
- Marketing — X (Twitter) pixel
o5gus, so we can measure visits and sign-ups from ads. Off until you accept. If your browser sends Global Privacy Control, we keep this off.
How to control cookies
- Use on this site.
- Use your browser settings to block or delete cookies.
- Send a Global Privacy Control signal. We treat it as a refusal of marketing cookies.
Blocking essential cookies will sign you out and may break the app. Blocking analytics or marketing does not stop you from using Garasu.
Changes
If we add a new non-essential cookie, we will update this notice and, where required, ask for consent again.