Cookie Policy

Effective date: September 10, 2026

Every cookie and browser-storage key that gatetest.io sets, what it is for, how long it lasts, and how to control it. There are no advertising or tracking cookies.

1. What Cookies Are

A cookie is a small text record your browser stores for a website and sends back with each request, which is how a site can tell that the person on the next page is the one who just signed in. Browser storage (localStorage) is similar but stays in the browser and is not sent with requests unless a script sends it.

This page lists all of them for gatetest.io. It is part of our Privacy Policy.

2. Cookies We Set

Every cookie below is strictly necessary: each one exists only so that you can sign in and stay signed in safely. None is used to identify you across other websites.

Name	Purpose	Duration	Essential
`gatetest_customer`	Your signed-in session. Encrypted (AES-256-GCM) and signed; HttpOnly; SameSite=Lax; Secure.	30 days	Yes
`gh_oauth_state / gl_oauth_state / goog_oauth_state / glc_oauth_state`	One-time anti-forgery token while you sign in with GitHub, GitLab, Google or Gluecron.	10 minutes	Yes
`glc_oauth_pkce`	One-time code verifier (PKCE) while you sign in with Gluecron. Sent only to Gluecron, once, to finish the sign-in; readable by no script.	10 minutes	Yes
`gh_oauth_next / gl_oauth_next / goog_oauth_next / glc_oauth_next`	The page on this site to return you to after sign-in. A same-origin path only; never set when you came straight to /login.	10 minutes	Yes
`gt_admin, gatetest_admin_session`	Operator console sessions. Only set for GateTest staff.	24 hours / 7 days	Yes

3. Browser Storage

These keys live in your browser's local storage. Neither is required for the service to work.

Name	Purpose	Duration	Essential
`gatetest-chat-history-v1`	Keeps your on-site support chat transcript in your own browser: while you are signed in, in session storage for this tab only; signed out, in local storage. Cleared when you sign out. Never sent to us as a whole.	Signed in: until you close the tab. Signed out: until you clear site data	No
`Sentry session replay`	Our error-monitoring provider may store a short buffer to reconstruct what happened before an error.	Session	No

4. No Advertising or Tracking

No advertising networks — we set no ad or retargeting cookies and load no ad scripts.
No analytics trackers — there is no page-view analytics service on the site.
No cross-site tracking — nothing we set identifies you on any other website, and we do not sell or share cookie data.
The only third-party storage is the short replay buffer kept by our error-monitoring provider so it can show us what happened just before an error. It is scrubbed of form input, keys and cookies before anything leaves your browser.

Because we set only strictly necessary cookies, we do not show a cookie banner. If that ever changes, this page and the banner will change together.

5. How to Control Cookies

Browser settings — every major browser lets you block, restrict or delete cookies and site data for a specific site. Look for "Cookies and site data" or "Site settings" in your browser's privacy settings.
Signing out — signing out ends your session. Your session cookie also expires on its own after 30 days.
Clearing site data — removes every cookie and storage key listed above at once. You will need to sign in again.
What blocking means — the essential cookies are required to sign in, so with them blocked you can still read the site and run a free scan, but you cannot sign in or buy a scan.

6. Changes

The tables on this page are generated from the same list the application itself uses, so a new cookie cannot ship without appearing here. If we ever add a cookie that is not strictly necessary we will ask for your consent before setting it.

7. Contact

Questions about cookies or browser storage: GateTest, support@gatetest.io.