Cookie Policy
Cookies and similar technologies actually used by GLWS.
Last updated · Version 2026-08-31.2
This Cookie Policy describes technologies used on GLWS, a service operated by FinDech UAB. It supplements the Privacy Policy.
We describe only what is actually used. We do not currently set non-essential analytics or marketing cookies, and we do not show a consent banner for cookies that are not used.
1. What we use
GLWS uses strictly necessary cookies to authenticate users, protect forms, and remember guest or buyer participation. These are required to provide the Service you request. They are not optional consent cookies.
| Cookie | Role |
|---|---|
glws_seller_access |
Seller session access token (httpOnly) |
glws_seller_refresh |
Seller session refresh token (httpOnly) |
glws_seller_csrf |
Cross-site request forgery protection for seller forms (httpOnly) |
glws_guest_owner |
Guest seller session token (httpOnly) |
glws_claim_* |
Buyer claim token for a specific deal code (httpOnly) |
glws_legal_ack |
Records that the current Terms/Privacy version was accepted in this browser so we do not re-prompt on every action (httpOnly) |
glws_legal_pending |
Short-lived flag that Terms were accepted on a sign-in form pending session establishment (httpOnly) |
The staff admin application (not the public website) uses separate glws_admin_* cookies for staff authentication and MFA. Those cookies are not set for ordinary GLWS website visitors.
Cookies use SameSite=Lax and are marked Secure when the site is served over HTTPS.
2. Local and session storage
The Create Deal page may store a draft in localStorage on your device so you do not lose work if you refresh. Funnel timing may use sessionStorage. These stay in your browser unless you submit a deal or clear site data.
Demo pages may use a local demo key. Production deal rooms do not treat browser storage as the source of truth for live deals.
3. Analytics and marketing
We do not currently use Google Analytics, Plausible, Meta Pixel, Vercel Web Analytics, or similar third-party marketing/analytics cookies on the public GLWS site.
We do record limited first-party product funnel events on the server (for example that the create page was viewed or a deal was submitted). Those events are not advertising cookies.
4. Legal-acceptance metadata
When you agree to the Terms of Service and acknowledge the Privacy Policy, we store a versioned acceptance record. Limited request metadata may be stored as hashes (IP and user-agent), not as marketing profiles. See the Privacy Policy.
5. How to control cookies
You can block or delete cookies in your browser. If you block strictly necessary cookies, you will not be able to stay signed in, complete guest creation, or act as a claimed Buyer.
If we later introduce non-essential cookies, we will not set them before any legally required consent and we will provide preference controls.