Exactly what GalaxyOrb.cloud stores in your browser, and why.
1. The short version
We use only strictly necessary cookies. No analytics, no advertising, no social media pixels and no third-party trackers. That's why there's no cookie banner asking for consent: the law doesn't require consent for cookies a site can't work without, and we don't use any others.
2. Everything we store in your browser
| Name | Type | What it does | How long |
|---|---|---|---|
| __Secure-authjs.session-token | Cookie | Keeps you signed in. Encrypted, and unreadable by scripts in the page. | Up to 8 hours |
| __Host-authjs.csrf-token | Cookie | Protects sign-in and sign-out from forged requests. | Until you close the browser |
| __Secure-authjs.callback-url | Cookie | Remembers which page to return you to after signing in. | Until you close the browser |
| __Secure-authjs.pkce.code_verifier, …state, …nonce | Cookies | One-time security checks while you sign in. Removed when sign-in completes. | 15 minutes |
| gx-impersonation | Cookie | Staff only: marks a read-only, time-limited “view as client” support session. | Up to 30 minutes |
| galaxyorb-cart | Local storage | Keeps the items in your cart on this device. Never sent to us until you check out. | Until you check out or clear it |
3. Payment pages
When you pay by card you are sent to Stripe's secure checkout page on stripe.com. Stripe sets its own cookies there, for fraud prevention, under its cookie policy. Our own pages load no Stripe scripts.
4. Your choices
You can block or delete cookies in your browser settings. Browsing our plans works without them, but signing in and checking out won't. If we ever add an optional cookie, we will ask first and update this page.
5. Questions
Email support@galaxyorb.cloud. More on how we handle personal data is in our Privacy Policy.