Cookie Policy

Last Updated: October 13, 2026

1. Introduction

This Cookie Policy explains how GhzLab, Inc. ("GhzLab," "we," "us") uses cookies and similar technologies on the Orbismo platform, website, and related services (the "Service").

It covers the three Orbismo websites: orbismo.com (this site), app.orbismo.com (the Orbismo application) and help.orbismo.com (the help center). They share one cookie choice: a decision you make on any of them applies to all three.

This Policy is incorporated by reference into our Privacy Policy and our Terms of Service. Capitalized terms not defined here have the meaning given in the Privacy Policy.

2. What Are Cookies?

A cookie is a small text file placed on your device by a website. Cookies allow sites to remember information between visits (such as your login state or preferences) and to collect information about how you use the site.

Similar technologies we use or may use include:

• Local storage / session storage (browser-side key-value storage)
• Pixels / web beacons (tiny images used to track events)
• SDKs (in mobile apps, where we offer them)
• Server logs (access logs tied to session identifiers)

For convenience, we refer to all of these collectively as "cookies" in this Policy.

3. Categories of Cookies We Use

We use two categories of cookies. Strictly Necessary cookies are always on. Analytics cookies are the only optional category, and we ask for your consent before setting them wherever we operate, not only where the law requires it. We do not use marketing or advertising cookies.

3.1 Strictly Necessary (Always On)

These cookies are essential for the Service to function. They cannot be disabled without breaking core functionality. No consent is required under GDPR / ePrivacy or comparable laws.

The consent cookie is:

We interpret "Strictly Necessary" narrowly — limited to security, session integrity, load balancing, and recording your consent state. Browser-local preferences such as theme and layout are described separately in Section 3.3; they are not cookies that require consent, because they never leave your browser.

3.2 Analytics / Performance (Optional)

Help us understand how visitors use the Service so we can improve it. Set only with your consent.

GhzLab uses Google Analytics 4 (provided by Google LLC) on orbismo.com, app.orbismo.com and help.orbismo.com to measure traffic, usage and where visitors come from. Until you accept, Google's analytics script is not loaded and no data is sent to Google. If your browser sends a Global Privacy Control signal, analytics are declined automatically and no Google Analytics cookies are set unless you later opt in (see Section 4.3). We do not currently use any error/crash-telemetry or uptime-monitoring providers.

When enabled by your consent, Google Analytics sets the following cookies on the shared .orbismo.com domain, so one visitor is counted once across the three sites:

If you have an Orbismo account and have accepted analytics cookies, the application also sends Google Analytics a pseudonymous account identifier so that your activity on different devices can be understood as one user. See our Privacy Policy for details, retention, and deletion.

3.3 Browser-Local Preferences (No Consent Needed)

The Orbismo application remembers some settings in your browser's local storage so they survive a reload:

These values are stored only on your device, at your request, when you change a setting. They are never transmitted to us or to anyone else and are not used to identify or track you, so they are not subject to the consent banner. You can clear them at any time through your browser's site-data controls.

3.4 Marketing / Advertising

We do not use third-party marketing or advertising cookies, and we do not sell or share personal data for cross-context behavioral advertising. If this changes, we will update this Policy and request consent before any such cookies are set.

4. Managing Your Cookie Preferences

4.1 Our Cookie Banner

Privacy by default. Until you make an affirmative choice, we set only Strictly Necessary cookies (Section 3.1). Analytics cookies are not set, and Google's script is not loaded, unless and until you accept. Ignoring, dismissing, or closing the banner is not treated as consent.

On your first visit to any of the three sites (and when our cookie practices materially change), we display a consent banner with two choices:

• Accept analytics cookies.
• Reject analytics cookies.

Your choice is stored in the orbismo_consent cookie for 12 months and applies to orbismo.com, app.orbismo.com and help.orbismo.com alike.

Changing your mind. A "Cookie settings" control in the footer of every page that uses analytics cookies reopens the banner. If you reject after having accepted, we delete the Google Analytics cookies and stop sending data to Google. Rejecting does not delete data Google Analytics already collected while you had accepted; see the Privacy Policy for how to request deletion.

4.2 Browser Controls

Most browsers let you view, delete, and block cookies. Note that blocking Strictly Necessary cookies may break the Service.

• Chrome
• Firefox
• Safari
• Edge

4.3 Global Privacy Control

We honor the Global Privacy Control (GPC) signal. We do not sell or share personal information (see Section 3.4), so we apply GPC to the one optional category we have: when we detect the signal and you have not yet made a choice, we record a rejection of Analytics cookies automatically and do not show the banner. You may still opt in later through the "Cookie settings" control, and a choice you made yourself is respected as made.

4.4 Do Not Track

Our Service does not respond to "Do Not Track" (DNT) signals due to the lack of industry consensus on DNT, but we honor GPC as described above.

5. Third-Party Cookies and Embedded Content

5.1 First-party infrastructure and Lemon Squeezy (billing)

Aside from the consent-gated Google Analytics cookies described in Section 3.2, all cookies within the main Orbismo application are set by GhzLab's own infrastructure. We use no third-party crash-telemetry or support-widget cookies at this time.

Lemon Squeezy checkout. When you initiate a purchase or manage your subscription, you are redirected to or interact with a Lemon Squeezy-hosted checkout flow. Lemon Squeezy (a Stripe company, our Merchant of Record) may set their own cookies in that context. Those cookies are governed by Lemon Squeezy's Privacy Policy and are outside GhzLab's control. We classify them as required for completing billing transactions and cannot be disabled without preventing purchase.

When GhzLab engages any additional third-party providers that set cookies on our own pages (for example, additional analytics, crash telemetry, or support widgets), this Policy will be updated with the provider name, cookie names, purpose, and duration before those cookies are deployed.

6. Cookie Duration

Cookies fall into two duration categories:

• Session cookies — deleted when you close your browser.
• Persistent cookies — remain on your device for a fixed period or until you delete them.

Specific retention periods for the cookies we set are listed in the tables in Section 3 (kept up to date as the Service evolves).

7. Data Collected by Cookies

Cookies may collect:

• Device/browser identifiers
• IP address (often truncated for analytics)
• Session and authentication tokens
• Usage events (page views, button clicks, feature interactions)
• Error/performance telemetry

This information is handled in accordance with our Privacy Policy.

8. Changes to This Policy

We may update this Cookie Policy to reflect changes in the cookies we use, technology, or applicable law. Material changes will be posted with an updated "Last Updated" date, and where required, we will seek renewed consent.

9. Contact

Privacy / cookie inquiries: privacy@ghzlab.com