Cookies are small text files stored on your device. GlowPilot also uses browser local storage for sign-in tokens, theme, and consent choices. We do not load Google Analytics. If you allow marketing cookies, we load the Meta pixel on public pages only (marketing site, signup, demo, and clinic diagnostic). It is not loaded on patient, appointment, booking, or payment pages, and it does not read form fields.
Types of Cookies We Use
Required to run the site and signed-in app: navigation, authentication tokens (currently in local storage), and remembering your cookie choices.
Storage in this category
accessToken (localStorage)
Stores the signed-in session token so the app can call the API. We plan to move this to an HttpOnly cookie.
Provider: GlowPilot
refreshToken (localStorage)
Stores a refresh token used to renew the session. We plan to move this to an HttpOnly cookie.
Provider: GlowPilot
gp_session
Presence flag so CRM pages do not flash patient data before client auth. Not a JWT and not a security boundary.
Provider: GlowPilot
gdpr_consent (localStorage)
Stores your cookie preference choices and consent timestamp.
Provider: GlowPilot
NEXT_LOCALE
Remembers the language you selected (en, es, pt) when using locale routing.
Provider: GlowPilot
gp_last_account (localStorage)
Remembers the last signed-in email and first name so the login screen can ask only for the password. Cleared if you choose a different account or opt out on this device. Not a session token.
Provider: GlowPilot
gp_last_account_opt_out (localStorage)
Stores that you asked this browser not to remember the last signed-in account.
Provider: GlowPilot
These items remember choices such as language, theme, or sidebar state. They are not used for advertising.
Storage in this category
clinic_theme (localStorage)
Remembers light or dark theme.
Provider: GlowPilot
pagination_page (localStorage)
Remembers the current page in some lists.
Provider: GlowPilot
sidebar:state
Remembers whether the clinic dashboard sidebar is collapsed.
Provider: GlowPilot
If you opt in, Meta may store _fbp and _fbc to measure visits and ad conversions on public pages. These cookies are not used inside the clinic app and are not filled with patient data. If you opt in and submit a public lead or demo form, we also send Meta a hashed version of that email so the conversion can be matched to an ad. You can refuse them and still use GlowPilot.
Storage in this category
_fbp
Meta browser identifier used to measure visits and ad conversions on public pages after you allow marketing cookies.
Provider: Meta
_fbc
Stores the click id from a Meta ad (fbclid) so a later signup or demo request on a public page can be attributed to that ad.
Provider: Meta
You can control and manage cookies through your browser settings. You can choose to block all cookies, accept only certain types, or delete existing cookies. Note that blocking necessary cookies may affect website functionality.
Cookie Consent Banner
When you first visit our site, you'll see a cookie consent banner where you can choose which types of cookies to accept.
Browser Settings
Most browsers allow you to control cookies through their settings. You can usually find these options in the "Privacy" or "Security" section of your browser's settings.
Third-Party Opt-Outs
Refuse marketing cookies in the banner to stop the Meta pixel. You can also review Meta ad settings at https://www.facebook.com/ads/preferences.
Please note that disabling certain cookies may affect your experience on our website:
- Essential cookies: The website may not function properly
- Preference cookies: Your settings and preferences won't be remembered
- Analytics cookies: not currently used
- Marketing cookies: ad measurement on public pages will not run
If you have any questions about our cookie policy or how we use cookies, please contact us. We're happy to help and provide any additional information you need.
Email: privacy@getglowpilot.com
For more information about our data practices, please see our Privacy Policy.