Legal

Cookie Policy

Last updated: 8 October 2026 · Version 1.1

In short: GhostCoach always uses the cookies and browser storage that are strictly necessary to sign you in, process your payments, and let the site work. These do not need your consent. We also offer optional analytics cookies (Google Analytics, loaded through Google Tag Manager). They stay off unless you click Accept in the cookie notice. We do not use advertising cookies.

This page explains what we store in your browser and why. It sits alongside our Privacy Policy, which covers how we handle your personal data more broadly.


1. What cookies and similar technologies are

“Cookies” are small text files a website stores in your browser. Websites also use related technologies — localStorage and sessionStorage — which work similarly but live in your browser's storage rather than as classic cookies. Throughout this policy, “cookies” refers to all of these unless we say otherwise.

Some are strictly necessary: the site cannot function without them. Others are optional and require your consent before they are set — for example analytics or advertising. GhostCoach always uses the strictly necessary ones. It uses the optional analytics ones only if you accept them.


2. What we use them for

If you click Accept, we also use analytics cookies to see which pages are visited and how the site is used, so we can improve it. If you click Reject, or have not chosen yet, no analytics cookies are set and Google Tag Manager is not loaded.

We do not use cookies to build a profile of you or to serve advertising, and we do not turn on Google’s advertising features.


3. Cookies and storage we use

Every item in this first table is strictly necessary to provide the service you have requested. None requires consent under the ePrivacy Directive or the Dutch Telecommunications Act. The optional analytics cookies are listed separately below.

NameTypeDurationCategoryPurpose
sb-…-auth-tokenlocalStorageUntil logoutStrictly necessaryKeeps you signed in across pages (Supabase authentication).
__stripe_midCookie1 yearStrictly necessaryStripe fraud prevention. Set only on payment pages.
__stripe_sidCookie30 minutesStrictly necessaryStripe fraud prevention (short-lived). Payment pages only.
gc_cookie_consentlocalStorage12 months, then we ask againStrictly necessaryRemembers whether you accepted or rejected optional cookies, so we don't re-ask.
gc_cookie_consent_tslocalStorage12 months, then we ask againStrictly necessaryRecords when you made that choice, so it can expire after 12 months.
gc_signupsessionStorageUntil tab closesStrictly necessaryCarries signup form data between steps.
gc_onboarding_partialsessionStorageUntil tab closesStrictly necessaryPreserves onboarding input if you navigate away.
gc_api_keysessionStorageUntil tab closesStrictly necessaryHolds your Anthropic API key during a chat session (Phase 1).

Optional analytics cookies (set only if you click Accept)

NameTypeDurationCategoryPurpose
_gaCookieUp to 2 yearsAnalytics (optional)Google Analytics. Tells visits apart so we can count visitors and see how the site is used.
_ga_…CookieUp to 2 yearsAnalytics (optional)Google Analytics. Keeps track of the current visit.

Note on Stripe cookies: __stripe_mid and __stripe_sid are set by Stripe.js but appear as first-party cookies on getghostcoach.com. They are used solely for payment security and fraud prevention, and only on our payment pages.


4. Third-party services and integrations

Some features rely on third parties. Where these involve your browser, we describe them here.

Stripe (payments)

Handles card payments and fraud prevention. Sets the two strictly-necessary cookies listed above, only on payment pages. See Stripe's own cookie and privacy policies for details.

Google Tag Manager and Google Analytics (optional, only if you accept)

If you click Accept, your browser loads Google Tag Manager from Google, which runs Google Analytics for us. Google Analytics sets the two cookies listed above and receives information about your visit, such as the pages you view and your device and browser. Google processes this in the United States and elsewhere. We use it only to understand how the site is used. We do not turn on Google’s advertising features and we do not share this data for advertising. If you click Reject, nothing is sent to Google. See Google’s privacy policy for how it handles data.

Google Fonts (typography)

Our fonts (DM Sans and Playfair Display) are served directly from getghostcoach.com. They are not loaded from Google's servers, so no data about you is shared with Google to display them.

Sign in with Google (optional)

If you choose to sign in using Google, you are redirected to that provider, which sets its own cookies on its own domains under its own policies. These are not GhostCoach cookies and we do not control them. You only encounter them if you actively choose that sign-in method. See Google's privacy policy for details.

Supabase, Anthropic, n8n, Beehiiv

These power authentication, AI responses, automation, and email. They process data on our servers or via secure API calls — they do not set cookies in your browser. How they handle your personal data is described in our Privacy Policy.

Beehiiv currently runs no tracking on this site. If we ever add email open/click tracking, we will update this policy and, where the law requires it, ask for your consent first.


5. International data transfers

Some of our providers process data in the United States. Where that involves your personal data, those transfers are governed by the safeguards described in our Privacy Policy (such as Standard Contractual Clauses or the EU–US Data Privacy Framework). This includes Google, if you accept analytics. See the Privacy Policy for the full picture.


6. Managing cookies

The strictly necessary cookies cannot be switched off here, because login and payment need them. The optional analytics cookies are off until you click Accept. You can change your choice at any time with “Cookie Preferences” in the footer of any page. Your choice is remembered for 12 months, then we ask again. You can also block or delete cookies in your browser settings, though blocking the necessary ones may break parts of the site.


7. Children

GhostCoach is intended for adults running their own businesses. It is not directed at children and we do not knowingly collect data from anyone under the age of 16.


8. Changes to this policy

We may update this policy when our technology or practices change — for example if we add other tools. We will revise the “Last updated” date and, for significant changes affecting optional cookies, ask for your consent where required.


9. Contact

Questions about this policy or your data? Contact GhostCoach:

Contact us via our contact form →

You also have the right to lodge a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).