Cookie policy

1. The short version

GoDushi uses a small set of first-party cookies: the ones needed to run the site, a couple to remember your preferences, and two pseudonymous ones we use for our own basic visitor statistics. We do not use third-party advertising cookies, cross-site trackers, or analytics SDKs that profile you across the web.

Our two statistics cookies are first-party and pseudonymous (a random id, never tied to your identity), which is why we don't show a consent banner today. We'll add a proper consent banner before we ever activate the third-party marketing tools described in section 3.

2. The cookies we set today

Authentication (essential)

When you sign in, our authentication provider (listed on our sub-processors page) sets cookies named sb-*-auth-token in your browser. They contain your encrypted session and let you stay signed in across page loads. Lifetime: about a week, refreshed on each visit. Without these you can't sign in.

Language preference

A cookie named godushi_locale remembers the language you picked from the footer switcher. Lifetime: one year. Without it the site falls back to your browser's language setting on each visit.

Currency preference

A cookie named godushi.currency remembers the currency you chose to view prices in. Lifetime: one year. Without it prices show in our default currency until you pick again. (The binding price is always the USD amount at checkout, whatever display currency you've chosen.)

Visitor statistics (first-party, pseudonymous)

We measure how the site is used with two first-party cookies that carry a random id, never linked to your name or account:

• godushi_session — anchors a single visit so we can see, in aggregate, how people move through the site. Lifetime: 30 minutes of inactivity, then a new session begins.
• godushi_attribution — remembers, on your first visit, how you found us (for example which link), so we can understand which channels bring renters. Lifetime: 90 days.

CSRF protection (essential)

Some forms (sign-in, sign-up, password reset) set a short-lived cookie to prevent cross-site request forgery attacks. Lifetime: minutes. Standard web-security plumbing.

3. Planned analytics and advertising cookies

We are planning to add the following tools in a future release (see our sub-processors page):

• Google Analytics for aggregated traffic analytics.
• Google Ads conversion tracking for advertising performance.
• Facebook (Meta) Pixel for Facebook and Instagram ad performance.

These tools are not active yet. When we turn them on we will:

• Show a cookie consent banner on first visit, with a clear choice between “Accept” and “Reject”.
• Set the relevant cookies only for users who accept. Rejecting still gives you full access to the platform.
• Update this policy and notify active users by email at least 30 days in advance.

4. Third-party cookies on linked pages

If you click a link to an external site (for example Google Calendar when you set up calendar sync), that site may set its own cookies under its own policy. We have no control over those.

5. Browser controls

You can clear or block cookies via your browser settings, but be aware that blocking auth cookies will prevent you from signing in. Each browser has its own controls. Search for “manage cookies in [your browser]” for instructions.

6. Changes

If we add new cookies (for example when we activate the opt-in analytics described in section 3), we'll update this policy and notify active users by email at least 30 days in advance.

7. Contact

Questions about cookies? Email privacy@godushi.com.