Legal
Cookies are small text files stored on your device when you visit a website. Similar storage technologies, such as Local Storage, can also enable particular functions, such as a login session or a creator selection you actively create.
Technically necessary cookies and similar storage technologies are always active (login, pre-launch access, a selection you actively create). In addition, we use Google Analytics 4 for audience measurement — but only if you explicitly consent in the cookie banner. We do not use marketing or advertising cookies. External content such as Calendly loads only after your active selection.
The legal basis for the use of technically necessary cookies is § 25 Abs. 2 Nr. 2 TDDDG in conjunction with Art. 6 Abs. 1 lit. f GDPR (legitimate interest in a functional, secure website). Consent is not required for this.
| Name | Purpose | Storage duration | Provider | Category |
|---|---|---|---|---|
| Local Storage: gc_shortlist, gc_cart_config, gc_cart_note, gc_brand, gc_brand_email | Stores a creator selection, quote configuration and note that you actively create locally on your device so it remains available during your visit and a later return. | Until you delete it in your browser or through the website function | Gross Management (first party) | Technically necessary |
| gm_access | Pre-launch password protection. After you successfully enter the access code, it stores that this preview version has been unlocked. | Session up to 30 days | Gross Management (first party) | Technically necessary |
| sb-access-token / sb-refresh-token (sb-*) | Maintains your login session after signing in to the creator/studio/admin portal (Supabase Auth). | Session up to 7 days (refresh token) | Supabase Inc. | Technically necessary |
| Local Storage: gm_cookie_consent | Stores locally in your browser whether you accepted or declined analytics via Google Analytics 4 — so the consent banner does not reappear on future visits. This value is not sent to any server. | Until you clear it in your browser storage | Gross Management (first party, Local Storage) | Technically necessary (consent storage) |
| _ga, _ga_G-1M032XEED6 (Google Analytics 4) | Analytics cookies for Google Analytics 4 (e.g. _ga, _ga_G-1M032XEED6). Only set if you consent in the consent banner; enable aggregated audience measurement (pages viewed, session, approximate country/region-level location). IP addresses are processed in anonymised form. | Up to 2 years (as set by Google) | Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland | Analytics (opt-in, consent only) |
On your first visit, we show a brief consent banner: you can accept or decline optional analytics cookies (Google Analytics 4) there. Your choice is stored locally in your browser under the key "gm_cookie_consent"; this value is not sent to any server. Google Analytics 4 is only loaded when you accept. You can withdraw your decision at any time by clearing "gm_cookie_consent" from your browser storage — the banner will reappear on your next visit.
You can delete, block or manage cookies individually at any time via your browser settings (e.g. Chrome, Firefox, Safari, Edge). Please note that deleting or blocking the technically necessary cookies may mean that you cannot log in or that the pre-launch access is requested again.
Detailed information on the processing of your personal data (hosting, Supabase, Calendly, Google login, data subject rights) can be found in our privacy policy.
