Legal
Cookie Policy
GoBrief sets a small number of first-party cookies (sign-in, CSRF protection, referral attribution, workspace preference) and uses Google Analytics to understand site usage, which sets its own cookies. We don't set advertising cookies and we don't sell or share your data with advertisers.
Pre-incorporation notice. GoBrief is currently operated by Brian Kaplan as a sole proprietor in Nashville, Tennessee, United States, pending formation of GoBrief LLC (a Tennessee limited liability company). On LLC formation, the entity becomes the successor-in-interest and operator under these documents. These policies have been reviewed internally against standard SaaS and privacy patterns and will receive outside-counsel review before customer-paid engagements scale. Any material updates will be versioned here and emailed to active customers 30 days in advance.
What's a cookie?
A cookie is a tiny text file your browser stores when you visit a website. It's sent back to the website on each subsequent request, so the site can remember things like whether you're signed in.
What we set
| Name | Category | Purpose | Expires |
|---|---|---|---|
authjs.session-token | Strictly necessary | Keeps you signed in after sign-in. | 30 days |
authjs.csrf-token | Strictly necessary | Prevents cross-site request forgery during sign-in. | Session |
authjs.callback-url | Strictly necessary | Remembers where to send you after sign-in. | Session |
gobrief_active_org | Functional | Remembers which workspace you're in when you belong to more than one. | 1 year |
gobrief_ref | Functional | Credits a referral source when you arrive via a /refer/<code> link. | 60 days |
gobrief_cookie_ack | Strictly necessary | Remembers that you've acknowledged this policy so we don't show the banner again. | 1 year |
_ga | Analytics | Google Analytics: distinguishes visitors so we can count unique users. | 2 years |
_ga_* | Analytics | Google Analytics: keeps session state for the current visit. | 2 years |
Analytics
We use two analytics tools to understand how the site is used:
- Google Analytics 4 measures page views, traffic sources, and aggregate usage. It sets the
_gacookies above. We have not enabled Google Signals, remarketing, or any advertising features, and we don't use analytics data for ads. You can opt out any time with Google's browser opt-out add-on or by blocking the_gacookies; the site works fully without them. - Cloudflare Web Analytics measures page performance. It is cookieless and does not track you across sites.
Analytics runs on our public marketing pages and signed-in app. It never sees the contents of your workspace, your files, or your partners' uploads.
What we don't do
We don't set advertising cookies. We don't load Meta Pixel, ad-network tags, or remarketing trackers. We don't share your browsing behavior with advertisers, and we don't sell personal information.
Our third-party integrations (Stripe Checkout, Google OAuth consent screen) set their own cookies when you use them, which are covered by Stripe's and Google's respective cookie policies, not ours. They only load when you interact with those specific features (checkout, sign-in with Google).
How to turn them off
Every major browser lets you block or clear cookies:
Note: blocking the strictly-necessary cookies above will make sign-in stop working.
Do Not Track & Global Privacy Control
We do not use advertising or cross-site tracking cookies. Our only analytics cookies are the Google Analytics cookies described above, configured without advertising features. Where California law treats a GPC signal as a valid opt-out of “sale” or “sharing” of personal information, we honor it; because we do not sell or share personal information for advertising purposes, no additional action is required on your part. To opt out of analytics entirely, use Google's opt-out add-on or block the _ga cookies.
Your rights
If you're in the EU/UK/Switzerland, California, or another jurisdiction with a data-protection law, you have rights over the personal data processed through these cookies, including access, correction, deletion, and objection. The full list of rights and how to exercise them is in our Privacy Policy. To make a request, email privacy@gobrief.co.
Questions
Email privacy@gobrief.co.
Questions? Reach us at legal@gobrief.co for legal, privacy@gobrief.co for data questions, security@gobrief.co for vulnerability disclosure.