Cookie Policy

Cookies are small text files stored on your device when you visit a website. They let the site remember your session, preferences, and activity. Similar technologies — local storage, session storage, pixels — are covered by this policy.

Strictly necessary

Needed for the site to function. Without these, authentication, checkout, and form submissions break. You cannot opt out of these without disabling core functionality.

• sb-* — Supabase session cookies (set on login, kept fresh by the middleware, cleared on logout)
• dodo_* — Dodo Payments checkout session
• Session / CSRF tokens

Analytics

Help us understand which pages work, which don’t, and where the funnel leaks. You can opt out at any time via the cookie banner.

• _ga, _ga_* — Google Analytics 4
• Vercel Analytics (anonymised request pings)

Marketing

Set when you arrive via a Google Ads click so we can attribute paid traffic. Not used for audience retargeting.

• gclid — Google Ads click ID (90-day lifetime)

The first time you visit, our consent banner offers three options: accept all, only strictly necessary, or customise. Your choice is remembered for 12 months. You can change it later by clearing the site’s cookies and reloading.

Browser-level controls also work: most browsers let you block third-party cookies, and some support the Global Privacy Control signal — we respect GPC as an opt-out of non-essential cookies.

We honour the Global Privacy Control (GPC) header. When GPC is present, analytics and marketing cookies are not set regardless of the banner state.

If the list of cookies changes materially, we update this page and surface a banner on next login. Minor changes (cookie expiry, naming) are logged silently.

Email golukicoding@gmail.com for any cookie-related request — including subject access, deletion, and GPC validation.

See also our privacy policy and terms.