Cookies and similar technologies
This page describes cookies and similar technologies used by Galaxy: Last Hope, how we use them, and how you can control non-essential categories. This information is provided for transparency under the GDPR and common EU ePrivacy expectations. It does not constitute legal advice; have your counsel review it if needed.
When we ask for your choices again
If we introduce new optional tools (for example analytics or advertising), change providers, or materially change how optional categories work, we raise an internal consent policy version in the application configuration. Your browser compares that number to the version stored with your saved preferences. When they no longer match, the cookie banner is shown again so you can confirm or change your choices before any new optional processing starts. The current policy version is 1.
Consent categories (banner)
- Strictly necessary — Required for security and core functionality (for example keeping you signed in, protecting forms). These are not driven by optional marketing or analytics switches.
- Analytics — Would measure how the service is used (not currently used on this site). If enabled in the future, we will only activate such tools after you opt in.
- Marketing — Would support advertising or cross-site profiling (not currently used on this site). If added later, activation will require your opt in.
Cookies set by this application
| Name | Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|---|
| _galaxy_session | First party | Stores your session (logged-in state, flash messages, and related server-side session data). | Browser session (cleared when you close the browser), unless configured otherwise. | Strictly necessary for operating the signed-in experience. |
| remember_user_token | First party | Keeps you signed in when you choose «Remember me» on login. | Up to 2 weeks while the option is active (Devise default). | Strictly necessary for the «Remember me» feature you request. |
Third-party resources loaded by pages
Some assets are loaded from external networks. Your browser may contact those hosts (similar to a normal page request). Third-party cookie behaviour depends on the provider; we do not rely on third-party advertising cookies in this application today.
Google Fonts
| Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|
| Third party (Google) | Delivers web font files and CSS for typography. | Depends on Google; not controlled by this app. | Loaded without a separate consent switch today; consider self-hosting fonts for stricter setups. |
cdnjs (Font Awesome stylesheet)
| Party | Purpose | Typical duration | Legal basis / note |
|---|---|---|---|
| Third party (Cloudflare cdnjs) | Delivers Font Awesome CSS used for icons in parts of the UI. | Depends on the CDN; not controlled by this app. | See above; loaded as a stylesheet reference. |
Template text — review with legal counsel before production reliance.