This page describes the cookies and local browser storage used by Ginsi's application code. Infrastructure providers may also process technical traffic metadata. That processing is described in the privacy policy and must not be confused with a claim that a particular provider is cookieless or never processes personal data.
1. Storage used by the application
| Key | Technology | Purpose | Duration |
|---|---|---|---|
| sb-*-auth-token | Local storage | Maintains the authenticated session | Managed according to session validity and sign-out; no fixed 30-day promise |
| cookie_consent | Local storage | Saves the preference shown in the cookie dialog | Up to 12 months under the current code, or until the user clears the preference |
| ginsi_survey_draft | Local storage, functional preference | Saves a survey draft in progress in the browser | Until the draft is published, replaced or cleared; no fixed time limit in the current code |
| ginsi_rec_cache:* | Local storage, functional preference | Caches a recommendation per user and organization | Reused for up to 7 days. An old entry is removed the next time it is read or when browser storage is cleared |
| ginsi.activeOrgId, ginsi.navOpen | Local storage | Remembers the selected organization and whether dashboard navigation is open | Until the preference changes or storage is cleared. The organization selection is also removed on sign-out |
| ginsi_language, ginsi-lang | Local storage | Remembers the selected interface language in the app and on the static landing page, respectively | Until the language changes or storage is cleared |
| survey_*_completed | Local storage | Saves the survey ID and timestamp to avoid showing the same survey again after a response | No fixed time limit in the current code; until browser storage is cleared |
The functional storage preference controls whether the current draft and recommendation features reuse and write their entries. The survey builder can still check whether a previous draft exists and remove it when the user starts over, uses a prefilled path or publishes. A previously saved value is not deleted solely by changing the preference. The other entries in the table are not controlled by the functional preference.
2. Optional website analytics
With your consent, Ginsi AB uses Google Analytics 4 on the public website at ginsi.ai to understand visits, referring websites and whether visitors open or submit a contact or demo enquiry. Google receives a browser identifier, the public page address without query parameters or fragments, a referring website origin, event timing and basic browser, device and approximate location information. The Google tag is not loaded before you agree.
The _ga cookie distinguishes browsers and _ga_TXW9LPC93X stores session state. Both are first-party cookies on ginsi.ai, configured for up to 60 days without renewal on page load. They are set only after analytics consent and are removed when you withdraw it. The cookie_consent preference is stored locally for up to 12 months. An older functional-storage choice does not grant analytics consent.
Analytics does not run in signed-in workspaces, login, invitation or reset flows. We do not send form contents, names, email addresses or customer records to Google Analytics. Google Signals, advertising personalization, user-provided data collection and enhanced measurement are disabled. Optional account data sharing with Google is disabled.
Google receives these events to provide website statistics. See our privacy policy for the legal basis, retention and international transfers.
3. Managing storage
Cookie settings opens your saved choices. Turning off website analytics stops future collection and removes its cookies. Functional storage remains a separate choice. Other entries are cleared through browser settings or the product actions described above. Clearing authentication storage can sign you out.
4. Third-party services
In the application, Supabase is used for authentication and data storage. Vercel Web Analytics receives page-view events. Ginsi's code excludes sensitive and token-bearing paths, removes query strings and fragments, and replaces survey identifiers in dashboard paths with a placeholder before analytics data is sent. This is a code-verified limitation, not a general promise that the provider never processes personal data.
Cloudflare, Vercel and Supabase may process technical traffic metadata when a request is served. The public landing, product, contact and legal pages load their core scripts, styles and graphics from Ginsi’s website. They use system fonts or font files served from the same website, without loading React or requesting fonts from external font providers. Google Analytics is loaded separately only after analytics consent. The current region, retention period, subcontractors and legal basis must be verified before they are stated as a customer promise.
Ginsi's current application code does not use advertising cookies, social media cookies or audience targeting for advertisements.
5. Updates
We update this page when the application's use of cookies or local storage changes. If a change requires consent or new information under applicable law, this must be addressed before the technology concerned is activated.
6. Questions
Have questions? Contact privacy@ginsi.se or read our privacy policy.
