Cookie and Local Storage Policy

What these technologies are

Cookies are small text records a website or service provider can place in a browser. Local storage is a separate browser feature that lets a site keep data on one device. Similar technologies can remember preferences, protect sessions, measure use, or support advertising.

Essential storage used by the site

• ✓gct_reports_v1 local storage: up to 50 My Lab reports intentionally saved in this browser
• ✓__Host-gct_session on HTTPS, or gct_session_dev during local development: a secure session used for sign-in and request protection
• ✓gct_consent: the optional analytics and marketing categories selected in the consent notice, retained for up to 180 days
• ✓Display or interface preferences when those controls are used
• ✓Service-worker cache entries: public site files stored by the browser for speed and limited offline use

Local reports and cloud reports

A local My Lab report is browser storage, not a cookie. It remains on the current device and browser until you delete it or clear site data. Signing in does not silently upload local reports. A member must use the import or save action before a completed report is copied to the account database.

Cloud reports are server records and are not stored in a cookie. They can be viewed, exported, or deleted through the account controls.

Optional analytics and marketing

The installation begins with third-party tracking and advertising identifiers disabled. If configured, Google Analytics, Google Tag Manager, or Cloudflare Web Analytics is loaded only when the analytics category is allowed. Meta Pixel, Microsoft Advertising UET, and Google AdSense are loaded only when the marketing category is allowed. These providers may set or read their own cookies or identifiers under their policies.

Google Search Console and Bing Webmaster verification tags, and an IndexNow key, are site-ownership or indexing tools rather than behavioral advertising tags. The site also performs limited first-party aggregate measurement without an analytics cookie; its daily rotating pseudonymous hash and Do Not Track behavior are described in the privacy policy.

Visitors in regions that require consent must be offered compliant choices. A Google-certified consent management platform may be required for Google advertising in the European Economic Area, United Kingdom, and Switzerland. This site’s category notice alone is not represented as satisfying every provider or regional requirement.

Your controls

Use the consent notice to accept all optional categories, reject them, or keep only selected categories. You can also block cookies, remove stored data, use private browsing, enable Do Not Track for first-party aggregate measurement, or use provider-specific advertising privacy settings.

Delete reports through My Lab or clear site storage in your browser. Blocking essential session storage can prevent sign-in, account forms, or contact forms from working, but live controller readings can still work in a supported browser. Changing a consent choice after a third-party tag has loaded does not by itself delete a cookie already placed by that provider; use browser or provider controls to remove it.

Updates

We update this policy when storage keys, providers, or legal requirements change. The privacy policy describes broader information handling and rights. Contact us if a storage technology appears that is not explained here.