Cookie notice

What this covers

This notice explains the cookies and similar storage that gobazo, operated by CONSENKO STUDIOS PRIVATE LIMITED, uses in the browser — cookies, local storage and session storage. It sits alongside the Privacy notice, which explains the personal data behind them.

Two kinds, and only two

Strictly necessary. The service cannot work without these, and they are set whether or not you agree to anything else, because there is no service to consent to otherwise:

• Session and sign-in — keeps you signed in between pages and ends the session when you sign out.
• Security — protects against cross-site request forgery and detects session tampering.
• Workspace routing — remembers which workspace you are working in, so a request lands on the right business's data.
• Preferences you set — such as language, and whether a panel is collapsed.

Optional. Set only if you agree, and never set before you do:

• Product analytics — which screens and features are used, tied to your account, so we can decide what to build next. This is the product analytics consent purpose in your account settings. Say no and everything else works exactly the same.

We do not use advertising cookies. We do not allow third parties to track you across other websites through the service. There is no advertising network in the product.

How you choose

Optional storage is off until you turn it on. You can change your mind at any time in your account settings, under the same consent switch. Withdrawing takes effect for future collection; it does not retrospectively unsend what was already collected lawfully, and we say so rather than implying otherwise.

Your browser also lets you block or delete cookies. Blocking strictly necessary cookies will sign you out and stop the service working — that is a limitation of how browsers and sessions work, not a penalty.

The actual list

In practice, gobazo relies on the browser's local and session storage rather than on HTTP cookies, and the public marketing site sets nothing at all in your browser. The current inventory is:

On the marketing site (gobazo.com)

• Analytics and session recordings. On our website we use PostHog only if you press “Accept”. It counts page visits and the buttons you press, and records how pages are used. Anything you type is hidden, and on the sign-up pages all text is hidden. If you decline, nothing is collected. You can change your choice at any time from “Cookie settings” at the bottom of every page; declining also deletes the random visitor id stored in your browser. Inside the gobazo app, we record how screens are used so we can fix confusing pages. Every typed value and all on-screen text is hidden. Pages with payment, customer, personal-mail, leave or attendance details are never recorded. A workspace administrator can switch recordings off for everyone in the workspace. Data is kept for [30 days for recordings / 12 months for usage events]

In the signed-in product — first-party browser storage

• token (local storage) — strictly necessary. Keeps you signed in; holds your session token and is cleared when you sign out.
• active-solution (local storage) — preference. Remembers which app you last used, so you return to it.
• dataChat.showHistory, pay.showFlow, tasks.finishedPeriod, pwa-ios-hint-dismissed (local storage) — preferences. Remember small display choices, such as whether a panel is open or a hint has been dismissed.
• mailbox_link_intent (session storage) — strictly necessary, temporary. Holds the state of an in-progress action for the life of the browser tab only.

Which workspace a request belongs to is decided by the web address (subdomain), not by a cookie.

We set no advertising cookies, no analytics cookies, and no third-party tracking. The product analytics consent purpose described in the Privacy notice is not currently collected through any cookie or browser storage. Our network provider, Cloudflare, may set a short-lived security cookie to tell automated traffic from human traffic; it carries no advertising function.

Changes

A published version is never edited in place. If the cookies change, a new version is published with its own effective date and the previous version stays on record.

Questions: hello@consenko.com. Anything about your personal data: mohit.dhawan@consenko.com.