Cookie Policy
GraceLumiq is a product of Graceworks Group (PTY)(LTD)
Company Registration No: 2025/570769/07
Email: privacy@gracelumiq.co.za
Effective date: 14 May 2026
1. What are cookies?
Cookies are small text files placed on your device by a website. They help websites remember information about your visit - for example, keeping you logged in between pages.
GraceLumiq uses both cookies (stored in your browser) and similar technologies such as localStorage(stored in your browser's local storage) and HTTP headers.
2. Cookies we use
2.1 Essential cookies - always active
These storage items are necessary for the Service to function. Blocking them in the browser will prevent core features such as authentication or safe consent handling.
| Cookie / Key | Purpose | Duration |
|---|---|---|
| `gl_access_token` (localStorage) | Stores your API access token after login so you stay authenticated while using the app. | Until you log out or clear site data |
| `gl_cookie_consent_v1` (localStorage) | Records whether you chose essential-only or analytics consent so we respect your choice. | Until you clear site data or change your choice |
| `wl_config` (cookie) | When you access GraceLumiq via a white-label subdomain or custom domain, carries branding configuration for that host. | 5 minutes (refreshed as you use the site on that host) |
2.2 Functional cookies - active by default, can opt out
These improve your experience but are not required for sign-in. You can remove them by clearing site data for GraceLumiq in your browser.
| Cookie / Key | Purpose | Duration |
|---|---|---|
| `gl_pref_chart_type`, `gl_pref_chart_palette` (localStorage) | Remembers chart type and colour palette preferences in Ask. | Persisted until cleared (handled in-app) |
| `gl_chat_coach_tip_v1` (localStorage) | Remembers when you dismissed the Ask coach tip. | Until cleared |
2.3 Analytics - conditional on consent
If you click Accept analytics too in the cookie banner, we may load:
- Google Analytics 4 - the Google tag (gtag.js) from googletagmanager.com. Google may set cookies such as _ga and _gid for session and usage measurement. We request IP anonymisation in our GA configuration.
- PostHog - product analytics; autocapture is disabled and we send only explicit events (for example uploads and queries). PostHog may use localStorage. See PostHog's privacy information.
- Error reporting - we use the @sentry/browser SDK; events go to an operator-chosen backend such as GlitchTip (open-source / self-hosted) or Sentry. Privacy terms depend on where your instance is hosted - see GlitchTip documentation or Sentry's privacy policy.
Until you opt in, these tools are not initialised from our application code. Operators configure NEXT_PUBLIC_GA_MEASUREMENT_ID (and optional PostHog / NEXT_PUBLIC_SENTRY_DSN for GlitchTip or Sentry) in web/.env.local; see our operator setup guide at docs/ENV_KEYS_SETUP.md in the repository.
We do not use on the GraceLumiq product:
- Meta Pixel, TikTok Pixel, or similar social advertising tags
- Third-party advertising or retargeting networks
- Cross-site tracking cookies for ads
3. Third-party cookies
Some third-party services integrated into GraceLumiq may set their own cookies when you interact with them:
| Service | When it applies | Their cookie policy |
|---|---|---|
| Google (Analytics 4) | Only after you opt in to analytics on our domain; measurement ID is configured by the site operator | policies.google.com/privacy |
| Payment checkout | Only when you complete payment on our secure checkout page (you may be redirected to the payment provider's domain) | See the privacy policy on the checkout page for the payment provider in use |
| Google OAuth | Only if you use "Sign in with Google" | policies.google.com/privacy |
GraceLumiq does not have control over cookies set by third-party domains. We recommend reviewing their policies.
4. Managing cookies
In your browser:
All major browsers allow you to view, block, and delete cookies and site storage. Instructions:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy and Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Privacy, Search, and Services → Cookies
Note: Blocking essential storage (Section 2.1) will prevent GraceLumiq from functioning correctly. You may not be able to log in or use the Service.
In the Service:
Use the cookie banner to choose Essential only or Accept analytics too. To reset your choice later, clear site data for this site or remove the gl_cookie_consent_v1 entry in localStorage for GraceLumiq and refresh; the banner will appear again where your browser allows.
5. Do Not Track
GraceLumiq respects the "Do Not Track" (DNT) browser signal. When DNT is enabled, we treat your choice as essential only: we do not load Google Analytics, PostHog, or the browser error-reporting SDK from our consent flow, and any previously saved analytics opt-in is overridden for that browser.
6. Changes
We may update this Cookie Policy as the Service evolves (for example, when we add or remove analytics tools). We will update the effective date and notify you of material changes.
Graceworks Group (PTY)(LTD) | Reg No: 2025/570769/07 | gracelumiq.co.za | privacy@gracelumiq.co.za