Cookies
GEO Guru sets only the cookies it needs to sign you in and keep forms safe. No advertising, no tracking, no analytics cookies.
Last updated 10 November 2026
Draft for legal review. This text is not final and may change before GEO Guru launches. Values in square brackets are still to be filled in.
The short version
Every cookie below is strictly necessary for something you asked for: signing in, staying signed in, or protecting a form you send. EU and UK rules (ePrivacy and PECR) don’t require consent for these, so we don’t show a cookie banner. A visitor who doesn’t sign in gets no GEO Guru cookies at all.
Cookies we set
| Name | What it does | When | Lasts |
|---|---|---|---|
gg_s | Keeps you signed in. Holds a random session token; we store only its hash. HttpOnly, Secure, SameSite=Lax | After you sign in | Your session ends 30 days after you last use GEO Guru, or when you sign out |
gg_csrf | Protects your account from forged requests from other websites (a random token your browser sends back with each change). Secure, SameSite=Lax | After you sign in | As gg_s; deleted when you sign out |
gg_oauth | Remembers a Google sign-in while you are on Google's page (state, nonce and code verifier, signed). HttpOnly, Secure, only sent to our Google sign-in address | When you choose “Sign in with Google” | 10 minutes; deleted on return |
gg_admin_csrf | Protects the staff admin tools from forged requests. SameSite=Strict | Only on admin.getgeoguru.com, for Doodle staff | Until the browser closes |
Cloudflare and Turnstile
- Turnstile is Cloudflare’s privacy-friendly check that a person, not a bot, is sending the free check, sign-in, report-email and enterprise forms. It runs in a frame from challenges.cloudflare.com on those forms only, and sets no cookies on getgeoguru.com.
- Cloudflare’s network hosts GEO Guru. If Cloudflare’s bot protection is switched on for our site, Cloudflare may set a security cookie such as
__cf_bm(30 minutes) to tell people from bots. It’s strictly necessary and isn’t used for tracking. - Page counts come from Cloudflare Web Analytics, which sets no cookies and doesn’t track you across sites.
What we don’t use
No advertising cookies, no social media pixels, no Google Analytics, no cross-site tracking, and no local storage of personal data in your browser. The browser extension keeps its connection token in the extension’s own storage, not in a cookie.
Your choices
You can block or delete cookies in your browser settings. GEO Guru’s free check works without any cookies; signing in needs gg_s and gg_csrf. More about your data: privacy policy. Questions: privacy@getgeoguru.com.