OrbitPage Legal

Cookie Policy

The cookies, local storage and session storage used on OrbitPage-owned pages, and how to control optional analytics.

Effective and last updated: 16 July 2026

1. Scope

This policy covers orbitpage.com, including the website, login and dashboard. OrbitPage does not load its own Google Analytics property on hosted user pages at orbitpage.net. A page owner may add their own integrations and must explain those separately where required.

2. What these technologies are

Cookies are small values stored by a browser and sent with later requests. Local storage and IndexedDB keep values in the browser until they are cleared, while session storage normally lasts for the current tab. Software development kits can use comparable identifiers to maintain a session or assess abuse.

3. Necessary storage

Firebase AuthenticationMaintains the sign-in state requested by the user and protects account access. Firebase may use IndexedDB, local storage and provider-domain cookies according to the selected sign-in method.

Firebase App Check / reCAPTCHA EnterpriseProduces security and attestation tokens and evaluates browser, device and request signals to distinguish legitimate app traffic from abuse.

Dashboard session cacheStores a short-lived workspace snapshot and the embedded editor's authenticated session in session storage so reloads are faster and the editor can call the correct tenant API.

Chat preferencesStores a random chat session identifier, the resized panel dimensions and whether the attention cue has been shown. These values remain in session storage for the current tab.

Interface preferencesStores settings requested by the user, such as editor onboarding state, sidebar state or page-specific consent choices.

orbitpage_consent_v1Stores the visitor's analytics choice in local storage until it is changed or browser data is cleared. This prevents repeatedly asking the same question.

Necessary technologies operate because they are required to provide a requested login, security, dashboard, preference or consent-management function. Blocking them can prevent the relevant feature from working.

4. Optional Google Analytics

OrbitPage uses Google Analytics 4 only on explicitly listed platform pages on orbitpage.com, and only after the visitor selects Allow analytics. Advertising storage, Google signals, advertising user data and ad personalisation are disabled. Email addresses, usernames, Firebase UIDs, tenant IDs and page content are not intentionally sent as analytics event parameters.

_gaFirst-party analytics cookie used to distinguish visitors. Google's default duration is up to two years, subject to the property configuration and browser limits.

_ga_<measurement-id>First-party analytics cookie used to maintain session state. Google's default duration is up to two years, subject to the property configuration and browser limits.

5. Provider flows you choose to open

Selecting Google sign-in opens Google's authentication flow, and selecting a paid plan or billing management opens Stripe Checkout or the Stripe Customer Portal. Those providers may use their own necessary and fraud-prevention cookies on their domains. Their policies apply while you use those provider pages.

6. Manage or withdraw consent

The first consent prompt presents optional analytics separately from essential storage. You can change or withdraw your choice at any time. Withdrawal updates Google Consent Mode, removes accessible OrbitPage-domain _ga* cookies and reloads the page without the analytics tag. Provider or browser storage outside OrbitPage's domain may need to be cleared in browser settings.

7. Browser controls and Global Privacy Control

You can delete or block storage through browser settings. Because necessary storage supports security and requested account functions, blocking it can stop sign-in or dashboard features. OrbitPage does not use advertising cookies or sell personal data; optional analytics remains off unless consent is recorded.

8. Updates and contact

This policy is updated when browser storage, providers or purposes materially change. Questions can be sent to contact@orbitpage.com.