What cookies we use
The site needs no cookie to work, and it sets none without your permission. The only one we ask for is the ad-measurement cookie described below: if you say no, it is not set and the site works exactly the same. The platform, where there is a session, is a different thing and it is further down.
Storage in your browser
To route your request we temporarily store the campaign parameters you arrived with, using your browser's session storage (sessionStorage, not cookies). They are cleared when you close the tab and never shared with third parties.
If you read the Galilei Academy courses, your browser notes which lessons you completed (localStorage, also not cookies). It is the only thing that draws your progress bar and your check marks: it never leaves your browser, never reaches our servers and identifies no one. Clearing it only removes the progress: the courses read the same.
If you arrived through the link of someone who recommends Galilei Hub, your browser keeps their code for 90 days (localStorage, also not cookies), so that an account opened within that window can be credited to whoever recommended it. The code belongs to that person, not to you: it carries no name of yours, identifies no one and goes nowhere else. Clearing it changes nothing about opening an account.
Anti-bot protection
On the contact form we use Cloudflare Turnstile to stop spam and bots. Turnstile loads a Cloudflare script and is designed to work without tracking cookies or puzzles; it only verifies that you are a person.
Demo scheduling (Google)
On the demo page, a button opens the Google Calendar scheduler so you can book a real time slot. That embed is a Google service that may use its own cookies when you interact with it; it is governed by Google's privacy policy. It only loads when you click the button; if you do not open it, it is not loaded.
Analytics and measurement
We use Cloudflare Web Analytics to count visits. It sets no cookies, stores nothing in your browser, and identifies nobody: that is why we do not ask your permission for it.
We also measure how the site is used with something of our own, no third parties: which pages are viewed and in what order, how far down each one people scroll, which elements get clicked, and which JavaScript errors show up. It sets no cookies and stores nothing in your browser, so we do not ask your permission for it either. Of your IP address we do not keep the address: we keep a code derived from it that changes every day, and its only job is to avoid counting the same person twice within the same day. Of a click we keep the label of the button or link, never what you typed into a field.
If you arrived from a Facebook, Instagram or TikTok ad, we want to know, so we do not spend on campaigns that do not work. That is measured by those networks’ pixels, which do set a cookie of their own (`_fbp` for Meta, `_ttp` for TikTok), and for that reason they only load if you press "Accept" in the notice at the bottom of the page. If you choose "No thanks", those scripts are not even downloaded. At any time, the notice at the bottom names exactly which networks are active: if one is not listed there, its pixel never loads, not even if you accept.
Your choice is stored in your browser’s local storage, not in a cookie, and you can change it whenever you like from the "Cookies" link in the footer.
In the platform (app.galileihub.com)
The platform is a different thing from the site: there is a session there, and a session needs to store something in your browser. This is everything it stores.
- Strictly necessary: your session tokens are stored in your browser’s local storage (localStorage) and, when what you open is a demo, in session storage, which is cleared when you close the tab. Without them you cannot move from one screen to the next without signing in again, so we do not ask your permission for them. They are not cookies and they never travel to a third party.
- Preferences: the language you chose and some interface settings, also in local storage. If you clear them, the platform goes back to its defaults.
- Cloudflare Turnstile at signup, to check that you are a person and not a bot opening accounts. Same as on the site: no puzzles, and it does not track you.
- A Meta pixel only on the signup screen (/signup) and on the welcome screen, and only if you accept. Your choice is stored in local storage, under the key `gh_consent`, and it is independent of the one you made on the site: these are two different domains and the browser shares nothing between them, so we ask once on each. The rest of the platform (where people work with their clients’ data) carries no pixel from anyone.
- Shared property links (VOW): when you arrive through one of those links and confirm your access, a technical cookie is set (`vow_session`, httponly) that remembers your device for 180 days, so you are not asked for access again on every visit. It is necessary for the link to work.
- Sign in with Google is handled by Google on its own domains, with its own cookies and its own privacy policy. We neither set them nor read them.
How to control it
You can clear local storage and cookies from your browser settings at any time, and the site will keep working.
Contact
Questions about cookies or data? Write to us at support@galileihub.com .