Cookie Policy

This page lists every cookie GenGrowth sets, what it is for, and how long it lasts. It is the companion to our Privacy Policy.

Strictly necessary

These make the site work. Without them sign-in, the SEO and Tech Agents, and the Search Console connection cannot function.

Cookie	Purpose	Lifetime
sb-<project>-auth-token	Your signed-in session. Scoped to gengrowth.ai so one sign-in covers both the marketing site and the app. HTTP-only.	Until sign-out or expiry
gg_onetap	A single-use nonce that binds a Google sign-in to the page that started it, so a captured token cannot be replayed. Encrypted, HTTP-only.	10 minutes
gg_oauth_tx	Holds the in-flight Google authorisation exchange. Encrypted, HTTP-only.	10 minutes
gg_id	Remembers which Google identity authorised Search Console, so you are not asked again on every visit. Encrypted, HTTP-only.	30 days
gg_gsc	Your Search Console read-only access token, together with the refresh token that renews it, so a return visit does not start from the consent screen again. Encrypted, HTTP-only, and sent only to /api paths.	30 days, extended on each use, up to 90 days from the day you authorised
gg_sites	The list of Search Console properties you granted, so the page can offer them. Encrypted, HTTP-only.	Same as gg_gsc
NEXT_LOCALE	Your language choice.	1 year

The gg_* cookies are sealed: each purpose has its own derived key, so a value issued for one cannot be presented as another.

Analytics

Cookie	Purpose	Lifetime
_ga	Google Analytics 4 — distinguishes visitors.	2 years
_ga_71TET2Y97Q	Google Analytics 4 — maintains session state for our property.	2 years

What we do not set

We set no advertising cookies, no cross-site tracking pixels, and no third-party cookies beyond Google Analytics and the cookies Google itself sets while you are signing in on accounts.google.com.

Managing cookies

You can clear or block cookies in your browser settings. Blocking the strictly necessary cookies will prevent sign-in, SEO and Tech Agent runs, and the Search Console tools from working. Stateless calculator pages that do not depend on these cookies may continue to function.

To opt out of Google Analytics specifically, you can install Google's opt-out browser add-on.

To end the Search Console connection, use the Disconnect control on either connected tool page. It clears these cookies and revokes our access at Google in the same step. Signing out does the same.

You can also revoke it from your Google account permissions page. This takes effect immediately, regardless of any cookie still in your browser.

Changes

We will update the version and effective date at the top of this page when the set of cookies changes.