Cookie policy

This page lists every cookie GoldStarred sets, who sets it, what it is for and how long it lasts. Some cookies are needed to run the site. Analytics cookies are not, so we set them only if you agree.

Analytics is switched on for this site, and waits for your answer. When you first visit, a banner asks whether you accept analytics cookies. Nothing in the analytics table below is set unless you say yes.

What cookies are

A cookie is a small text file a website saves on your device so it can remember something between pages or visits. The same rules apply to similar technologies, such as browser storage.

Necessary cookies

These make the site work. The law does not require consent for them, and you cannot switch them off here, because without them you could not sign in or keep your cookie choice.

Name	Provider	Purpose	Category	How long
sb-<project>-auth-token, and sb-<project>-auth-token.0, .1 and so on when it is split into parts	GoldStarred, through Supabase, our sign-in provider	Keeps you signed in after you enter your emailed code, so you do not have to repeat it on every page	Necessary	Until you sign out; your browser keeps it for at most 400 days
sb-<project>-auth-token-code-verifier	GoldStarred, through Supabase	Links the two halves of a sign-in with another account, such as Google, so nobody else can finish it	Necessary	Deleted when that sign-in completes
gs_consent	GoldStarred	Remembers your cookie choice: whether you accepted analytics, and when	Necessary	180 days

The sign-in cookies are set only when you sign in. If you only read reviews, they are not set. gs_consent is set only when you answer the cookie banner, so a site with no analytics never sets it.

Analytics cookies

These are set only after you choose "Accept analytics", or turn analytics on under "Choose", and only on public pages. They are never set on the dashboard, the sign-in pages, the review form, or any page reached from a link in our emails.

The sign-in and review forms use Cloudflare Turnstile to check that a person is asking for a code. It sets no cookie.

Name	Provider	Purpose	Category	How long
_ga	Google Analytics	Tells one visitor's visits apart from another's, so we can count visitors rather than page loads	Analytics	2 years
_ga_PT0SK013VL	Google Analytics	Keeps the state of your current visit (for example, which pages you have seen in it)	Analytics	2 years

We load Google Analytics through Google Tag Manager. Tag Manager is a loader: it sets no cookies itself. Until you agree, we do not load Tag Manager at all, so Google receives nothing from your visit. We use Google's consent mode, which tells Google's tags that advertising storage and personalisation are refused.

If you accept analytics, Tag Manager also loads Ahrefs Web Analytics, which counts visits without setting any cookie or storing anything on your device.

We use no advertising or marketing cookies, no social media tracking buttons and no profiling. If that ever changes, we will update this page and ask you again before any such cookie is set.

Changing or withdrawing your consent

Use "Cookie settings" in the footer of any page to see your choice and change it. If you turn analytics off, we tell Google's tag that consent is withdrawn, delete the _ga and _ga_PT0SK013VL cookies from our domain, and reload the page so the tag stops. Saying no does not change how the site works for you.

You can also block or delete cookies in your browser settings. Blocking the sign-in cookies means you cannot stay signed in. Deleting gs_consent means we ask again.

Badges on other sites

Businesses may show our badge on their own websites. The badge sets no cookies and does no tracking. The business's own site may use its own cookies, which its cookie policy covers. If you add the GoldStarred badge to your site, you are responsible for your own cookie notice.

Personal data

Cookies can be personal data. Our privacy policy explains how we handle personal data, including analytics data, and what your rights are.

Our legal basis

UK rules on cookies sit in the Privacy and Electronic Communications Regulations (PECR), alongside the UK GDPR and the Data Protection Act 2018. PECR exempts storage that is strictly necessary to provide a service you asked for; our necessary cookies rely on that. For analytics cookies, the basis is your consent, which you can withdraw at any time.

Contact

Questions about this page can go to hello@goldstarred.com.

GoldStarred is operated by Harber Glaves Trading Ltd, company number 16605946, registered in England and Wales.

Registered office: Unit A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE.

Contact: hello@goldstarred.com