This Cookie Policy explains how ganttchartmaker.app uses cookies and similar technologies to recognise you, save your preferences, keep you signed in, and (when active) serve advertising. Read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work, or work more efficiently, and to provide information to the site owner. We also use a similar technology, the browser's localStorage (we do not currently use sessionStorage or IndexedDB). For brevity, we refer to all of these as "cookies" in this Policy.
2. Legal basis
Under Greek Law 3471/2006 (Art. 4(5)) implementing the ePrivacy Directive, we may set strictly necessary cookies without your consent. All other cookies — preferences, statistics, advertising — require your prior, freely given, specific, informed, and unambiguous consent, which you provide through the cookie banner on your first visit.
The default state is denied: no non-essential cookies are set until you click Accept (all or by category). You can change your choice at any time via the Cookie Settings link in the footer.
3. Cookies we use
Strictly necessary (no consent required)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
sb-*-auth-token | Supabase (auth) | Keeps you signed in to your account | Session + 1h refresh |
sb-*-auth-token-code-verifier | Supabase (auth) | OAuth PKCE security parameter during sign-in | ~10 minutes |
cookie_consent | ganttchartmaker.app | Records your consent choice for the cookie banner | 12 months |
gcm_sb_bk | ganttchartmaker.app | Crash-safe backup of your sign-in session, restored if the browser loses its site data | 60 days |
gcm_cc_bk | ganttchartmaker.app | Backup of your cookie-consent choice, same purpose as cookie_consent | 12 months |
__cf_bm | Cloudflare | Bot management — distinguishes humans from bots | 30 minutes |
cf_clearance | Cloudflare | Anti-bot challenge token | 30 days |
Local storage (strictly necessary — used to save your work locally on your device)
| Key | Provider | Purpose | Duration |
|---|---|---|---|
gantt-projects | ganttchartmaker.app | Your locally-saved Gantt charts (signed-out users) | Persistent until you clear it |
gantt-theme-mode / gantt-theme-family | ganttchartmaker.app | Your theme preference | Persistent until you clear it |
gantt-lang | ganttchartmaker.app | Your language preference | Persistent until you clear it |
gantt-side-panel-width | ganttchartmaker.app | Your side panel width preference | Persistent until you clear it |
gantt-stat-* | ganttchartmaker.app | Usage counters shown in your profile (exports, time in app), kept only on this device | Persistent until you clear it |
gantt-* (other UI prefs) | ganttchartmaker.app | Various UI preferences (today-line, snap, events row, etc.) | Persistent until you clear it |
Preferences (consent required)
None currently set without consent.
Statistics / Analytics
With your consent (the Analytics category of the cookie banner), we use Google Analytics 4 to understand how the site and app are used. Nothing loads and nothing is sent to Google until you consent: if you select Reject all, ignore the banner, or your browser sends a Global Privacy Control signal, Google Analytics never runs. Your chart content is never sent to any analytics service. With consent, these cookies are set:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Distinguishes visitors for usage statistics | 2 years | |
_ga_* | Keeps session state for usage statistics | 2 years |
You can withdraw consent at any time via Cookie Settings in the footer; collection stops, and you can clear the cookies from your browser. Separately, our hosting provider (Cloudflare) gives us cookieless, aggregate traffic statistics that set no identifiers and require no consent under the ePrivacy Directive.
Marketing / Advertising (consent required — Google AdSense)
When you have given consent and advertising is active, Google AdSense sets the following cookies:
| Name | Provider | Purpose | Duration |
|---|---|---|---|
NID | User preferences, ad personalisation | 6 months | |
IDE | Google DoubleClick | Measure ad effectiveness | 13 months |
ANID | Ad personalisation across Google services | 13 months | |
DSID | Cross-device sign-in identifier for ads | 14 days | |
__gads | AdSense ad serving | 13 months | |
__gpi | AdSense personalised ad delivery | 13 months | |
FPID | First-party identifier used by Google services | 13 months |
If you select Reject all or do not interact with the banner, none of these cookies are set and any advertising shown will be non-personalised. Personalised advertising requires explicit consent.
4. How to control cookies
- Cookie banner: shown on first visit. Choose Accept all, Reject all, or Manage (per-category choices).
- Cookie Settings link in the footer: opens the cookie-preferences panel so you can change your choice at any time.
- Your browser: all modern browsers let you block or delete cookies. Doing so may break sign-in, prevent your chart drafts from being saved locally, and force you to re-set your preferences on every visit.
- Google ad personalisation: turn off personalised ads at adssettings.google.com even after consenting on our site.
5. Browser signals
We respect the Global Privacy Control (GPC) signal — when your browser sends GPC, we treat it as an opt-out of "sale" or "sharing" for CCPA purposes and as a withdrawal of consent for ePrivacy purposes. We currently do not act on the older Do Not Track (DNT) signal because there is no consensus standard for it.
6. Changes to this Policy
We may update this Cookie Policy when our cookie usage changes. The Effective date at the top of the page reflects the current version. Material changes are announced via the cookie banner re-prompt and the in-app notifications bell.
7. Contact
Questions about cookies or how we use them: fokompet@gmail.com.