Cookie Policy - How We Use Cookies and Tracking Technologies
Cookie Policy
Effective date: August 16, 2025
Applies to: rsz.app and all subdomains
Owner/Controller: Spectracular ("Spectracular", "we", "us")
Contact: [email protected]
This Cookie Policy explains how Spectracular uses cookies and similar technologies on rsz.app. It should be read together with our Privacy Policy. If anything here conflicts with local law in your location, we will follow the stricter requirement.
1. What are cookies and similar technologies?
- Cookies are small text files placed on your device by a website. They are widely used to make websites work, to remember preferences, and to collect analytics.
- Local storage and session storage are browser storage technologies used for similar purposes.
- Pixels, tags, and SDKs are small pieces of code that can collect usage information.
We refer to all of the above as "cookies" for simplicity.
2. Who sets cookies?
- First-party cookies are set by rsz.app.
- Third-party cookies are set by providers whose services we use. Today, we use Google Analytics for analytics.
We may add or remove providers over time. We will update this policy and our cookie banner if we do.
3. How we use cookies
We use cookies for the purposes below:
1. Strictly necessary (essential)
- Run core site functions, security, load balancing, and fraud prevention.
- Examples: session identifiers, authentication, CSRF protection, bot management, rate limiting.
- These cookies are required for the service to work and do not require consent where applicable law permits.
2. Analytics (consent-based in the EEA/UK/CH)
- Measure and improve site performance and features, understand how users interact with pages and product flows.
- Today we use Google Analytics 4 (GA4) configured to minimize personal data where possible.
We do not use cookies for targeted advertising at this time. If that changes, we will update this policy and request consent where required.
4. Legal bases and consent
- In the EEA, UK, and Switzerland, we only place non-essential cookies (such as analytics) after you give consent via our cookie banner or settings. You can withdraw consent at any time.
- In other locations, we follow local rules for consent and opt-out.
- Our legal bases under GDPR for processing data from cookies are legitimate interests for strictly necessary cookies and consent for analytics cookies.
5. Managing your preferences
- Use the Manage Cookie Settings link in our footer or banner to grant, refuse, or change consent for non-essential cookies.
- You can also control cookies through your browser settings by blocking or deleting cookies. This may affect site functionality.
- We honor Global Privacy Control (GPC) signals where required. When detected, we will treat it as an opt-out for analytics that rely on personal data in relevant jurisdictions.
6. Google Analytics (GA4)
We use Google Analytics to generate aggregated usage statistics that help us improve rsz.app. Key points:
- Data minimization. We avoid sending user-provided names or contact details to GA. GA4 uses a randomly generated identifier in cookies to recognize returning browsers.
- IP handling. GA4 does not log full IP addresses in reports. We also disable Google Signals and Ads Personalization unless you explicitly consent where required.
- Retention. GA4 event data retention is set to a limited period consistent with our improvement needs. Aggregated data may be kept longer.
- International transfers. Data may be processed by Google LLC in the United States and elsewhere. Google participates in applicable transfer frameworks and offers a Data Processing Agreement. See Google's privacy resources for details.
You may opt out by adjusting our Manage Cookie Settings, using your browser controls, or installing Google's opt-out add-on where available.
7. Cookies we use today
Actual cookies may vary slightly by browser and updates from vendors. The following list reflects current usage:
| Category | Cookie | Provider | Purpose | Expires |
|---|---|---|---|---|
| Strictly necessary | __Host-session or similar | rsz.app | Maintains your session and security settings | Session or up to 12 months |
| Strictly necessary | csrf_token or similar | rsz.app | Prevents cross-site request forgery | Session |
| Strictly necessary | cf_* (for example, __cf_bm) | Cloudflare | Bot management, performance, and security | From 30 minutes to 1 day |
| Analytics | _ga | Google Analytics | Distinguishes visitors for analytics | 13 months in the EEA/UK, up to 24 months elsewhere |
| Analytics | _ga_<container-id> | Google Analytics | Persists session state for GA4 | 13 months in the EEA/UK, up to 24 months elsewhere |
If we later add other analytics or advertising tools, they will appear in this table and in the cookie banner with the ability to consent or opt out.
8. Do we "sell" or "share" personal information?
We do not sell personal information. In jurisdictions like California that define "share" for cross-context behavioral advertising, we do not share personal information for advertising. If our practices change, we will provide a mechanism labeled Your Privacy Choices to opt out and we will update this policy.
9. Data retention
- Essential cookie data is kept only as long as needed for security and operation.
- Analytics data is retained for the period set in GA4 and then deleted or aggregated.
10. Children
Our services are not directed to children under the age defined by local law (for example, 13 in the US or 16 in parts of the EEA). We do not knowingly place non-essential cookies for such users without appropriate consent.
11. Updates to this policy
We may update this Cookie Policy to reflect changes to cookies, laws, or our services. When we make material changes, we will update the effective date and, where required, inform you or request consent again.
12. Contact us
If you have questions about this Cookie Policy or our use of cookies, contact us at [email protected].