Cookie Policy
The cookies we use, and why
Last updated: 17 October 2026
1. What a cookie is
A cookie is a small file a website stores in your browser. Similar technologies, such as your browser’s local storage, work in much the same way, and this policy covers them too.
2. The short version
We only use cookies that the Services need to work: to keep you signed in and to keep your account secure. We do not use advertising cookies, and we do not track you across other websites.
Because these cookies are strictly necessary, the law does not require us to ask for your consent before setting them, so you will not see a cookie banner on GIMLabs.
3. The cookies we set
| Cookie | What it does | How long |
|---|---|---|
| next-auth.[app].session-token | Keeps you signed in to each GIMLabs app (Manage, Insight, Connect, Template, Product OS) | Until you sign out, or your session expires |
| next-auth.csrf-token | Protects your sign-in from cross-site request forgery | Until you close your browser |
| next-auth.callback-url | Returns you to the page you asked for after you sign in | Until you close your browser |
In production these names start with __Secure- or __Host-, which means browsers only send them over a secure connection.
We also keep a few preferences in your browser’s local storage, such as which panels you had open or which tab you last used, so the apps open the way you left them. They never leave your device.
4. Analytics
We use PostHog, hosted in the EU, to understand how our websites and apps are used, so we can improve them. We run it without cookies or any other storage on your device: it counts visits and the features used without giving your browser a lasting identifier, and it does not track you across sites.
5. Payments and embedded services
When you pay for a subscription, you do so on a payment page run by Stripe, which sets its own cookies to process the payment safely and prevent fraud. Those are covered by Stripe’s cookie policy.
Maps in GIMLabs are drawn using services such as Mapbox. They receive the map area you are viewing, so they can send back the right map, but they do not set advertising cookies through GIMLabs.
6. Managing cookies
You can block or delete cookies in your browser’s settings. If you block the cookies above, you will not be able to sign in to GIMLabs.
7. Changes
If we start using any cookie that is not strictly necessary, we will update this policy first and ask for your consent where the law requires it.
Questions? Email privacy@gimlabs.io.
Questions about this policy? Get in touch.