Cookie Policy
Last updated: 10 May 2026. Version 1.
This page describes everything SelfPub Go stores in your browser — cookies and the Local Storage entries that count the same under the rules — why we store it, and how long it stays. We follow the ePrivacy Directive and GDPR Article 7 — your consent is granular, specific, and revocable.
Your answer is kept in your browser, not on our servers, so you take it back by clearing the selfpubgo.cookies.v1entry in your browser’s Local Storage — or by clearing site data for selfpubgo.com, which does the same thing. The banner then asks again on your next visit, and everything optional stays denied until you answer it.
Before you answer the banner, nothing beyond the strictly necessary entries below is set. We run Google Consent Mode v2: every Google storage signal starts denied on each page load, except the two that keep you signed in and secure — functionality_storage and security_storage. Those are Google’s own signal names, not the Functional category below, which stores nothing today. Under denial Google’s tag writes no cookies at all and sends only cookieless pings, which carry no identifier that can single you out.
Accepting analytics grants analytics_storage, which is what lets GA4 set the _gacookies listed below. The single marketing switch grants all three of Google’s advertising signals at once — ad_storage, ad_user_data, and ad_personalization. Closing the banner without choosing counts as a refusal, and your answer is replayed from Local Storage on later visits so you are not asked twice.
Strictly necessary
Always onNeeded for the platform to load, to keep you signed in, and to remember what you told us on this banner. We cannot disable these.
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
| sb-<project>-auth-token | Supabase Auth | Holds your signed-in session — the access token and the refresh token that renews it. Set only once you sign in. | 400 days, or until you sign out (Supabase default) |
| selfpubgo.cookies.v1 | SelfPub Go — Local Storage, not a cookie | Stores the answer you gave this banner so we don't ask again. Written only once you answer. | No expiry — stays until you clear site data |
| selfpubgo.exit_intent.last_shown | SelfPub Go — Local Storage, not a cookie | One timestamp, so our early-access popup is not shown to you again for 30 days. No identifier, and nothing is sent to us. | No expiry — stays until you clear site data |
Functional
Opt-inPreference storage — remembering things like language or appearance so the interface comes back the way you left it.
We store no preference of this kind today: the site has no language or appearance switch to remember. If we add one it is listed here, and this policy is updated at the same time.
Analytics
Opt-inGoogle Analytics 4 (Google LLC, United States), property G-BS9DPNB333 — page views, referrer, device and browser, plus a few product events such as sign-ups and installer downloads. No third-party ad networks. No cookie is set until you opt in — before that the tag sends only cookieless pings — and the data is processed on Google servers in the United States.
| Cookie | Provider | Purpose | Retention |
|---|---|---|---|
| _ga | Google Analytics 4 (Google LLC, US) | Random client ID, so repeat visits from this browser count as one visitor. Pseudonymous — we send no name or email with it. | 2 years (gtag.js default) |
| _ga_BS9DPNB333 | Google Analytics 4 (Google LLC, US) | Holds session state — session start and session count — for our GA4 property. | 2 years (gtag.js default) |
| spg_attr | SelfPub Go — first-party, our own servers | Remembers where you first arrived from: the campaign tags in the link, the referring site (host and path only), and the first page you opened. No identifier of any kind, nothing shared with third parties. Sent to us only if you register. Decline analytics and we keep the same note in session storage instead — it lasts the visit and then disappears. | 90 days |
Marketing
Opt-inWe run no advertising tag and no third-party ad network, so this switch sets no cookie today. What it does is lift Google's three advertising restrictions in advance — ad_storage, ad_user_data, and ad_personalization.
No marketing cookie is set at present. Turning this on only pre-authorizes Google's advertising signals; nothing is stored until an advertising tag is actually added, and this policy is updated when it is.
Your rights under GDPR
You can withdraw consent at any time without affecting prior processing. To exercise your right of access, rectification, erasure, or portability, email privacy@selfpubgo.com. We respond within 30 days per Article 12(3).
Browser-level controls also work: most browsers let you block third-party cookies, clear cookies on close, or use private browsing. We do not use any tracking that survives a Local Storage + cookie purge.
Read our full Privacy Policy and Terms of Service.