Legal and compliance framework
Cookies and measurement
The service limits cookies to what is strictly required for session handling, application security and measurement when configured.
Necessary cookies
Session cookies support authentication, CSRF protection and the minimum persistence needed for the workspace.
- Without them, the audit workspace and secure forms do not work correctly.
- No advertising cookie is required to use the application.
Measurement and advertising
GoatCounter analytics is always active; AdSense only activates when deployment-time identifiers are configured.
- Measurement is used for product usage and conversion funnel visibility.
- Sponsored placements remain inactive until the publisher ID is configured.
The core product behavior relies on secure session handling, without unnecessary tracking.