Cookie Policy

1.1 A cookie is a small text file a site asks your browser to store and send back on later requests. Similar technologies include localStorage, sessionStorage, and pixels.

1.2 Cookies are strictly necessary when the service cannot work without them: signing you in, protecting a form against cross-site request forgery, balancing load. Under EU and UK law, strictly necessary cookies do not require consent. Everything else does.

1.3 The marketing site asks before loading Google Analytics. Rejecting analytics leaves the site available without analytics cookies.

1.4 The GitAegis desktop application is not a browser and sets no cookies. It stores its own settings on your disk. Used without signing in it transmits nothing: see Privacy Policy §2.

2.1 Analytics is off by default. No Google tag loads until you select Accept analytics. Your choice is stored in your browser.

2.2 With consent, Google Tag Manager loads one Google Analytics 4 tag. It measures page views, scrolls, outbound clicks and downloads. Google Analytics may process the page URL, referrer, approximate location, browser and device information, and identifiers stored in the cookies listed below. We do not configure advertising or remarketing tags.

2.3 You can reject analytics or withdraw consent using Analytics preferences in the footer. Withdrawal stops new tracking and removes accessible Google Analytics cookies from this site. It does not undo data already collected while consent was active.

2.4 We do not run advertising pixels. There is no Meta pixel, no LinkedIn Insight tag, no Google Ads remarketing tag, and no third-party ad network on gitaegis.com.

2.5 Google Analytics is configured only for the production marketing site at gitaegis.com. It is absent from the UAT site, localhost and app.gitaegis.com.

3.1 app.gitaegis.com sets strictly necessary cookies only: session authentication, CSRF protection, and interface preference.

3.2 These cookies exist so that you can stay signed in, so that forms cannot be forged by another site, and so the interface remembers your theme. Without them, the application does not work.

3.3 Application cookies are set with Secure, HttpOnly where the value is not read by client-side code, and SameSite=Lax or Strict as appropriate.

3.4 No analytics or advertising cookie is set in the application. Product telemetry is a separate, opt-in mechanism described in Privacy Policy §6, and it does not use cookies.

4.1 Every cookie either property sets is listed here. If a cookie is not listed, we did not set it.

gitaegis.com: marketing site

app.gitaegis.com: application

4.2 The application sets a strictly necessary, first-party cookie for each of the following purposes:

• Session authentication: an opaque session identifier, never your credentials
• Cross-site request forgery protection: ties a submitted form to your session
• Interface preference: light, dark or system theme, and UI scale
• Language and region formatting

4.3 The names and durations of those cookies are not published in this draft. A cookie table that does not match the application’s actual Set-Cookie headers is a compliance defect, not a copy mistake, so these are read off the deployed application rather than written down in advance, and re-read on every release that changes authentication or session handling.

5.1 The marketing site stores your analytics choice in localStorage. The application also uses browser storage for interface state such as panel widths, the last mode and draft form text.

5.2 That storage is not transmitted to us and is not readable by any other site.

5.3 Clearing site data clears your analytics choice and you will be asked again. Application interface state returns to defaults.

6.1 We embed no third-party content that sets cookies on gitaegis.com: no embedded video player, no third-party font service that sets cookies, no social widgets, no comment system.

6.2 Two places would involve a third party by design: a payment checkout, which sets its own cookies under its own domain for fraud prevention and payment processing; and a hosted status page, which may set its own strictly necessary cookies under its own domain. Neither provider has been engaged, so neither is named here.

6.3 We do not control third-party cookies and do not receive their contents. Their providers, purposes, and locations are listed on the Subprocessors page.

7.1 In your browser. Every major browser lets you view, block, and delete cookies per site:

• Safari: Settings → Privacy → Manage Website Data
• Chrome: Settings → Privacy and security → Third-party cookies
• Firefox: Settings → Privacy & Security → Cookies and Site Data
• Edge: Settings → Cookies and site permissions

7.2 What blocking ours does. Blocking analytics cookies on gitaegis.com leaves the marketing site usable. Blocking necessary cookies on app.gitaegis.com means you cannot stay signed in and forms may fail.

7.3 Use Analytics preferences in the footer to accept or reject marketing-site analytics. Product telemetry is separate and controlled in the application.

7.4 Everything else about your data (export, correction, deletion) is described in Privacy Policy §10.

8.1 We honour Global Privacy Control signals where they apply. Since we do not sell or share personal information and set no advertising cookies, a Global Privacy Control signal keeps analytics off by default.

8.2 There is no agreed standard for Do Not Track, and we do not respond to it differently. We do not track across sites in the first place.

9.1 We will update this policy if the cookies we set change.

9.2 We will not introduce a non-essential cookie without asking for consent first, and this page will be updated before any such cookie is set.

9.3 Material changes are notified as described in Privacy Policy §16.

10.1 Questions about cookies: privacy@gitaegis.com

10.2 A named data protection contact and a postal address for Fahid Digital Ventures LLC are not published in this draft.

10.3 Related: Privacy Policy · Subprocessors · Terms of Service