Cookie Policy

Last Updated: May 30, 2026

1. Introduction

This Cookie Policy explains how GhzLab, Inc. ("GhzLab," "we," "us") uses cookies and similar technologies on the Orbismo platform, website, and related services (the "Service").

This Policy is incorporated by reference into our Privacy Policy and our Terms of Service. Capitalized terms not defined here have the meaning given in the Privacy Policy.

2. What Are Cookies?

A cookie is a small text file placed on your device by a website. Cookies allow sites to remember information between visits (such as your login state or preferences) and to collect information about how you use the site.

Similar technologies we use or may use include:

• Local storage / session storage (browser-side key-value storage)
• Pixels / web beacons (tiny images used to track events)
• SDKs (in mobile apps, where we offer them)
• Server logs (access logs tied to session identifiers)

For convenience, we refer to all of these collectively as "cookies" in this Policy.

3. Categories of Cookies We Use

We classify cookies into the following categories. Where consent is required by law (e.g., in the EU/EEA, UK), we ask for your consent before setting cookies in the Analytics or Marketing categories.

3.1 Strictly Necessary (Always On)

These cookies are essential for the Service to function. They cannot be disabled without breaking core functionality. No consent is required under GDPR / ePrivacy or comparable laws.

We interpret "Strictly Necessary" narrowly — limited to security, session integrity, load balancing, and recording your consent state. Convenience features such as language, theme, and layout preferences are classified as Functionality cookies under Section 3.3, even though they may feel essential.

3.2 Analytics / Performance

Help us understand how users interact with the Service so we can improve it. Consent-based where required.

GhzLab uses Google Analytics 4 (provided by Google LLC) on our public website to measure aggregate traffic and usage so we can improve the site. These analytics cookies are set only after you accept them via our consent banner. If your browser sends a Global Privacy Control signal, analytics are suppressed automatically and no Google Analytics cookies are set unless you later opt in (see Section 4.3). We do not currently use any error/crash-telemetry or uptime-monitoring providers.

When enabled by your consent, Google Analytics sets the following cookies:

3.3 Functionality

Enable enhanced (but non-essential) features. Consent-based where required.

3.4 Marketing / Advertising

We do not currently use third-party marketing or advertising cookies, and we do not sell or share personal data for cross-context behavioral advertising. If this changes, we will update this Policy and request consent before any such cookies are set.

4. Managing Your Cookie Preferences

4.1 Our Cookie Banner

Privacy by default. Until you make an affirmative choice, we load only Strictly Necessary cookies (Section 3.1). Analytics, Functionality, and any other non-essential cookies are not set unless and until you accept them or enable them through customized preferences. Ignoring, dismissing, or closing the banner is not treated as consent.

On your first visit (and when our cookie practices materially change), we display a consent banner allowing you to:

• Accept all non-essential cookies.
• Reject all non-essential cookies.
• Customize your preferences by category.

"Reject" and "Accept" are given equal visual prominence. You can change your preferences at any time by clicking the "Cookie settings" control shown on every page. Withdrawing consent is as easy as granting it.

4.2 Browser Controls

Most browsers let you view, delete, and block cookies. Note that blocking Strictly Necessary cookies may break the Service.

• Chrome
• Firefox
• Safari
• Edge

4.3 Global Privacy Control

We honor the Global Privacy Control (GPC) signal. Because we do not sell personal information and do not share it for cross-context behavioral advertising (see Section 3.4), there is no "sale" or "share" for GPC to opt out of in the narrow statutory sense used by state privacy laws. As a broader privacy-protective measure, when we detect a valid GPC signal we automatically apply it as an opt-out of Analytics/Performance cookies (Section 3.2) and Functionality cookies (Section 3.3) and suppress any "Accept all" default on the consent banner, so a GPC user experiences the most privacy-restrictive state without additional action. GPC users may still customize preferences manually at any time.

4.4 Do Not Track

Our Service does not respond to "Do Not Track" (DNT) signals due to the lack of industry consensus on DNT, but we honor GPC as described above.

5. Third-Party Cookies and Embedded Content

5.1 First-party infrastructure and Lemon Squeezy (billing)

Aside from the consent-gated Google Analytics cookies described in Section 3.2, all cookies within the main Orbismo application are set by GhzLab's own infrastructure. We use no third-party crash-telemetry or support-widget cookies at this time.

Lemon Squeezy checkout. When you initiate a purchase or manage your subscription, you are redirected to or interact with a Lemon Squeezy-hosted checkout flow. Lemon Squeezy (a Stripe company, our Merchant of Record) may set their own cookies in that context. Those cookies are governed by Lemon Squeezy's Privacy Policy and are outside GhzLab's control. We classify them as required for completing billing transactions and cannot be disabled without preventing purchase.

When GhzLab engages any additional third-party providers that set cookies on our own pages (for example, additional analytics, crash telemetry, or support widgets), this Policy will be updated with the provider name, cookie names, purpose, and duration before those cookies are deployed.

6. Cookie Duration

Cookies fall into two duration categories:

• Session cookies — deleted when you close your browser.
• Persistent cookies — remain on your device for a fixed period or until you delete them.

Specific retention periods for the cookies we set are listed in the tables in Section 3 (kept up to date as the Service evolves).

7. Data Collected by Cookies

Cookies may collect:

• Device/browser identifiers
• IP address (often truncated for analytics)
• Session and authentication tokens
• Usage events (page views, button clicks, feature interactions)
• Error/performance telemetry

This information is handled in accordance with our Privacy Policy.

8. Changes to This Policy

We may update this Cookie Policy to reflect changes in the cookies we use, technology, or applicable law. Material changes will be posted with an updated "Last Updated" date, and where required, we will seek renewed consent.

9. Contact

Privacy / cookie inquiries: privacy@ghzlab.com