Cookies and browser storage
2026-10-01.1
Cookies and browser storage
This notice explains why Galescope uses browser records. Cookies are small records that can accompany relevant web requests. localStorage, sessionStorage, IndexedDB and Cache Storage are separate browser storage mechanisms; their contents are not automatically attached to every request just because they are stored there.
Records belong to the site address, browser and browser profile; the test site and main site have separate records. Unless stated otherwise, persistent records below have no fixed automatic expiry. They may be removed by the application’s relevant cleanup, by you clearing site data, or by the browser evicting storage.
Cloud session cookie
Provider: Galescope. Name: galescope_session. Type: first-party HTTP cookie. Purpose: maintaining your Google-verified Cloud session and checking account access. Retention: up to 7 days from sign-in; removed when sign-out succeeds. Signing in again creates a new session. Using a Local folder does not depend on this Cloud cookie.
The cookie is HttpOnly, so page scripts cannot read its value. It uses Secure on HTTPS connections and SameSite=Lax for cross-site requests. Blocking it can prevent Cloud sign-in from working. It is not used to build an advertising profile.
Language, appearance and account preferences
Provider: Galescope. Type: localStorage. galescope-language remembers your language, visual-workspace-theme your theme, and records beginning with galescope-last-page: your last page. Panel, grid, zoom and editing-tool settings may also be stored. Changing a preference updates the relevant record; these persistent records do not expire after a shared number of days.
The galescope-workspace-mode sessionStorage record holds the tab’s Local/Cloud choice. It normally lasts for the tab session, though browser session restoration may restore it. The galescope-shared-cloud-account localStorage record remembers the account identifier and email between tabs and is cleared at sign-out or when no valid session is found. This account hint alone does not grant access. Records signalling session changes between tabs may also be stored in the browser.
Folder access, cache and drafts
Provider: Galescope. Type: IndexedDB. The local-visual-workspace database holds your selected Local folder’s access handle and small workspace caches; galescope-recovery holds workspace mappings and drafts waiting to be saved. A folder handle does not mean all files in that folder are copied into browser storage.
galescope-cloud-opening keeps device copies of the workspace listing and some layout/metadata records for faster opening. The cache is updated as content changes, and successfully saved drafts are removed by the relevant cleanup. Remaining records have no shared automatic expiry. High Protection’s encryption of data sent to Cloud does not mean every record open or remembered on your device is separately encrypted.
The galescope-cloud-images-v1 store in Cache Storage also keeps some Cloud content on the device to reduce repeated downloads. It is managed with limits of 48 MiB and 256 content entries; superseded versions and older entries exceeding those limits are removed. Signing out or changing accounts clears the relevant account’s content and opening caches. This is not a backup service.
Remembering a High Protection key
Provider: Galescope. Type: the galescope-device-vaults IndexedDB database. After you unlock the workspace, a cryptographic key associated with your account and vault is stored so you do not have to type the key again in that browser. This record does not store the printable recovery-key text shown in your PDF.
There is no automatic expiry; signing out of Cloud does not delete this record. Your account session is still checked before use. Clearing site data or losing browser storage means you need the recovery key again. Keep your recovery PDF separately.
Remembering acceptance of the terms
Provider: Galescope. For Local use, localStorage records beginning with galescope-local-terms: hold the accepted version, language and acceptance time. They have no fixed expiry; a new terms version may require acceptance again. Cloud acceptance is stored on the server in association with your account; it is not an advertising cookie. These records do not grant advertising or analytics permission.
Google and other external services
When the Google sign-in button is shown, the Google Identity Services component is loaded from accounts.google.com. Google may receive technical information such as your IP address and browser details and may use its own session and security records depending on your browser and sign-in method. Galescope does not set retention periods for records on Google’s domains; these are separate from Galescope’s 7-day session cookie.
Cloudflare supplies infrastructure for serving and securing the website. Opening external links or loading external content can also connect to the relevant provider. Processing connection data is not limited to cookies; our privacy notice explains the broader data processing.
Advertising and analytics choices
The current Galescope application code does not run live AdSense ads, Google Analytics or similar visitor analytics scripts. The AdSense account verification tag is not itself an advertising script. Advertising cards in the test environment are visual layout previews.
Before real advertising or analytics tools are added, this notice will be updated and processing requiring consent will stay off until you choose. Accept, Reject and Preferences options will be accessible, you will be able to change your choice later, and rejecting will not block basic workspace use. Viewing this page or accepting the terms does not grant such permission.
Managing and clearing records
You can change language, theme and appearance in the relevant application settings. Signing out of Cloud removes the session cookie; it does not erase all device records or the remembered High Protection key. For broader clearing or cookie blocking, use your browser’s site-data/permissions controls for Galescope.
Save pending work and keep your recovery key before clearing site data. Clearing can remove unsaved drafts, preferences and remembered folder/key information. It does not automatically delete your Cloud files or the original files in your selected Local folder; you may need to sign in, authorize the folder or enter your recovery key again.
Questions and personal-data requests: info@galescope.com. Last updated: 1 October 2026.