Current storage
| Name | Type and purpose | Lifetime |
|---|---|---|
__Host-gcba_session | Essential, first-party, HttpOnly production cookie that authenticates the browser. Local development uses gcba_session. | Up to 30 days in the browser. Server sessions expire after 30 days of inactivity and no later than 90 days after creation. |
gcba_hint | Essential, first-party cookie that tells the web app whether a session may exist. It is not an authentication credential. | Up to 30 days, and cleared at logout. |
gcba_oauth_state | Essential, first-party, HttpOnly cookie used to verify a Google sign-in return and resist cross-site request forgery. | 10 minutes or until the OAuth callback clears it. |
gcba_oauth_next | Essential, first-party, HttpOnly cookie holding a validated same-site return path during Google sign-in. | 10 minutes or until the OAuth callback clears it. |
starlight-theme | Local storage holding the chosen light or dark appearance. | Until the user changes it or clears site data. |
| Audit setup keys | Session storage holding the active draft pointer, URL or pasted text, questions, and intermediate setup state so an audit form can recover within the current tab. | For the browser tab session, with completed or reset draft pointers cleared earlier where applicable. |
Analytics
GetCitedByAI sends allowlisted, size-limited product events to Cloudflare Analytics Engine. The event boundary excludes audited URLs, pasted text, questions, findings, email addresses, and credentials. This analytics path does not set a dedicated analytics cookie.
With your consent, GetCitedByAI also loads Google Analytics 4, which sets the _ga and _ga_* cookies (up to 2 years) to distinguish visitors and sessions. It does not load, and sets no cookie, until you choose Accept in the cookie notice. Your choice is stored in local storage under gcba-consent.
Choices
The essential technologies above are strictly necessary for the feature that uses them, so no preference disables them while keeping that feature working. Browser controls can block or clear storage, but sign-in, theme persistence, or audit recovery may then stop working as expected.
Google Analytics is the only non-essential technology and it is opt-in: the cookie notice asks once, and Decline is remembered. To change your answer, clear this site’s data in your browser and the notice will ask again.