Last updated: 27 May 2026
This Cookie Policy explains how Garisea uses cookies and similar tracking technologies on the partner dashboard at partner.garisea.com, what each one does, how long they last, and how you can control them.
It pairs with the Partner Privacy Notice, which describes how the data we collect via cookies is processed.
Strictly necessary for the dashboard to work. Without them you can't sign in, submit a form, or stay authenticated across pages. They cannot be disabled in-app — your only option is to block cookies entirely at the browser level, which breaks the dashboard.
| Cookie | Purpose | Lifetime |
|---|---|---|
access_token | Authenticates your dashboard session. HttpOnly + Secure + SameSite=Lax. | 30 minutes |
refresh_token | Allows your session to be refreshed without re-entering your password. Rotated on every use. | 30 days |
garisea_csrf | CSRF protection token for state-changing requests. | Session |
cf_* | Bot mitigation + DDoS protection tokens set by our security provider. | 30 minutes |
garisea_partner_cookie_consent | Remembers your cookie preferences so the banner doesn't reappear. | 1 year |
These remember choices you've made so we can present the dashboard the way you like it. You can clear them anytime from your browser; Garisea will reset to its defaults next visit.
| Key / Cookie | Purpose | Lifetime |
|---|---|---|
theme | Light / dark / system theme preference. | 1 year |
sidebar_expanded | Whether the dashboard sidebar is expanded or collapsed. | 1 year |
recent_searches | Your last few command-palette searches for quick reuse. | 90 days |
timezone | Detected timezone used to render dates and times in your local zone. | Session |
Analytics cookies help us understand how partners use the dashboard — which features get reached, where partners drop off, which screens convert. The aggregate insights help us prioritise improvements. We only set analytics cookies after you accept via the cookie consent banner. They can be revoked anytime by re-opening the banner or clearing the consent cookie.
Our analytics provider sets a small number of cookies on your browser to:
We additionally set a pseudonymous device_id cookie (1 year) that ties your dashboard sessions together for our own product analytics. It does not contain your name, email, or other personal data.
The analytics provider is configured with IP anonymization on and data-sharing with its advertising ecosystem off. We do not use it for advertising remarketing or cross-app tracking.
A third-party crash-monitoring provider captures errors and crashes that occur in the dashboard so we can fix them. It collects the stack trace, request context (URL, query params with sensitive fields scrubbed), your user ID for correlation, and a hashed IP. Emails and names are scrubbed. We rely on legitimate interestas our lawful basis for error monitoring (it's necessary for platform security and stability) and so this category is not gated by the cookie consent banner. You can't opt out of error monitoring without losing the ability for us to diagnose dashboard errors affecting your account.
Some features depend on third-party services that set their own cookies in your browser. We don't control these cookies — they fall under each provider's privacy policy.
You can change your cookie preferences in three ways:
garisea_partner_cookie_consent; the banner reappears on next page load with your previous selections cleared.Disabling analytics cookies has no functional impact — you'll just be less visible to us in aggregate metrics. Disabling essential cookies breaks sign-in and the dashboard cannot operate.
We respect the Global Privacy Control (GPC) signal sent by browsers that support it. When your browser sends a GPC header, we treat it as an explicit opt-out of analytics cookies for that session. We don't respond to the older “Do Not Track” header because it's been deprecated by every major browser; we rely on the consent banner instead.
Garisea's partner surface is web-only — there is no Garisea mobile app on the partner side. (Customers have a mobile app on iOS and Android; its storage practices are described in the customer-facing Cookie Policy.) When you operate the dashboard from a mobile browser on your phone or tablet, the cookies described in §3–§7 apply normally.
We may update this Cookie Policy as we add or remove third-party services, change retention periods, or align with new regulations. Material changes are notified via the dashboard. The “Last updated” date at the top of this page reflects the most recent revision.
Cookie-related questions: [email protected] or [email protected].