Cookie Notice

We do not track you. Global Growth Portal sets three cookies, all of them needed to sign you in and keep you safe while you are signed in. There is no analytics package on this site, no advertising pixel, and no third-party script that follows you anywhere.

That is also why there is no cookie banner. Consent banners exist for cookies you can reasonably decline. We do not set any of those.

authjs.session-token

Keeps you signed in. Without it you would have to enter your password on every page.
Lasts: 30 days, or until you sign out · Named __Secure-authjs.session-token over HTTPS

authjs.csrf-token

Protects you from cross-site request forgery — another site trying to make your browser act on this one while you are signed in.
Lasts: Until you close your browser · Named __Host-authjs.csrf-token over HTTPS

authjs.callback-url

Remembers where to send you back to after you sign in.
Lasts: Until you close your browser · Named __Secure-authjs.callback-url over HTTPS

All three are HttpOnly, meaning no script can read them, and SameSite=Lax, meaning they are not sent when another site links into ours in a way that could be abused. Over HTTPS they are also Secure.

You can block or delete cookies in your browser settings. The public parts of the site — the home page, and every listing teaser — work fine without them. Signing in does not: without the session cookie there is no way for the site to know it is still you between one page and the next.

When you pay, you are on Stripe’s own checkout page, not ours. Stripe sets its own cookies there, for fraud prevention among other things, under Stripe’s privacy policy. We do not control those and they are not set by this site.

If we ever add a cookie, it will be listed here before it is set. If we ever add one that is not strictly necessary, we will ask you first.

Questions: opportunities@globalgrowthportal.com. See also the Privacy Policy.