1The short version
Global Growth Portal sets four cookies that the site needs: three to sign you in and keep you safe while you are, and one to remember your answer to our cookie banner.
With your permission, we also use Google Analytics to see how people find and use the site, and to measure our advertising. Its cookies are set only if you accept on the banner. If you reject, or ignore the banner, nothing from Google is loaded at all.
2Cookies the site needs
- authjs.session-token
- Keeps you signed in. Without it you would have to enter your password on every page.
Lasts: 30 days, or until you sign out · Named __Secure-authjs.session-token over HTTPS - authjs.csrf-token
- Protects you from cross-site request forgery — another site trying to make your browser act on this one while you are signed in.
Lasts: Until you close your browser · Named __Host-authjs.csrf-token over HTTPS - authjs.callback-url
- Remembers where to send you back to after you sign in.
Lasts: Until you close your browser · Named __Secure-authjs.callback-url over HTTPS - ggp_consent
- Remembers whether you accepted or rejected analytics cookies, so we do not ask again on every page.
Lasts: One year
The three sign-in cookies are HttpOnly, meaning no script can read them, and SameSite=Lax, meaning they are not sent when another site links into ours in a way that could be abused. Over HTTPS they are also Secure.
3Cookies only if you accept
- _ga
- Google Analytics. Tells one visitor apart from another, so we can count visitors rather than page loads.
Lasts: 2 years - _ga_<ID>
- Google Analytics. Keeps track of your current visit.
Lasts: 2 years - _gcl_au
- Google Ads, if we turn on advertising measurement. Connects a visit to the ad that brought you here.
Lasts: 90 days
These are Google’s cookies, and what Google does with the information is set out in how Google uses information from sites that use its services. Google Analytics records which pages you visit and their titles, anything you type into the opportunities search, how you arrived, your device and browser, and your approximate location. It does not receive your name, your email address, your messages, or the protected details of any listing.
4Changing your mind
Use Cookie settings at the foot of any page to accept or reject again. If you withdraw your consent, we stop loading Google Analytics and delete its cookies from your browser. Google also offers a browser add-on that opts you out of Google Analytics on every site.
5If you block them
You can block or delete cookies in your browser settings. The public parts of the site — the home page, and every listing teaser — work fine without them. Signing in does not: without the session cookie there is no way for the site to know it is still you between one page and the next.
6Stripe
When you pay, you are on Stripe’s own checkout page, not ours. Stripe sets its own cookies there, for fraud prevention among other things, under Stripe’s privacy policy. We do not control those and they are not set by this site.
7Changes
If we ever add a cookie, it will be listed here before it is set. Anything that is not strictly necessary waits until you have said yes.
Questions: opportunities@globalgrowthportal.com. See also the Privacy Policy.