Cookie Policy
Effective date: 15 July 2026
This Cookie Policy explains how 8legs uses cookies and similar technologies (local storage, session storage) for users worldwide. It supplements our Privacy Policy.
1. What we use
- Strictly necessary. Firebase Authentication sets tokens/identifiers to keep you signed in and secure. These are required for the service to work and do not require consent.
- Preferences (local storage). We store your settings (e.g. theme/design mode, plan tier, recent in-app state) in your browser's local and session storage so the app behaves consistently.
- Analytics & marketing (consent-based). Google Analytics 4 and Google Tag Manager set cookies and identifiers to measure usage and improve the product. We also use the Meta (Facebook) Pixel, which sets the “_fbp” / “_fbc” cookies, to measure our advertising. These cookies are set only if you accept — see our Privacy Policy for what is shared with Meta.
Cookies we use
| Cookie / storage | Provider | Purpose | Category | Retention |
|---|---|---|---|---|
| Firebase Auth token | Google (Firebase) | Keeps you signed in | Strictly necessary | Session / until sign-out |
| 8legs_consent, 8legs_plan, theme, etc. | 8legs (local storage) | Remembers your cookie choice and app preferences | Necessary / preferences | Until you clear it |
| _ga, _ga_* | Google Analytics 4 | Usage measurement | Analytics (consent) | Up to 24 months |
| _fbp | Meta | Advertising / conversion measurement | Marketing (consent) | Up to 3 months |
| _fbc | Meta | Records the ad click you arrived from | Marketing (consent) | Up to 90 days |
| __stripe_mid, __stripe_sid | Stripe | Payment fraud prevention on checkout pages | Necessary (checkout) | Session – 12 months |
2. Consent & Google Consent Mode v2
When you first visit, a banner lets you Accept or Decline non-essential (analytics/marketing) technologies. We implement Google Consent Mode v2, which behaves the same wherever you are in the world:
- Before you choose, and in the EU/EEA/UK by default, analytics and advertising storage are set to "denied" — no analytics or marketing cookies are written.
- If you accept, full analytics with cookies is enabled.
- If you decline or simply ignore the banner, we do not set analytics/marketing cookies. Google Consent Mode still sends anonymous, cookieless pings that let us see aggregate, non-identifying trends (for example, roughly how many audits are run), with ad-data redaction enabled.
This lets us keep basic, privacy-preserving analytics measurement while respecting your cookie choice.
3. Changing your choice
You can change or withdraw your choice at any time:
You can also clear cookies in your browser. Strictly necessary technologies cannot be switched off, as the service cannot function without them.
4. Third-party cookies
Analytics and tag technologies are provided by Google; advertising measurement is provided by Meta (Facebook). Stripe may set cookies on its own checkout pages when you make a payment. Because these providers operate globally, using them can involve an international data transfer — see the Privacy Policy for the safeguards we rely on.
5. Contact
Questions: support@8legs.app.
These documents describe the 8legs service. If anything here conflicts with what the product actually does, the discrepancy is a bug — please report it to us.