GalleryLink uses four cookies, all of them strictly necessary to make the Service work. We set no advertising cookies, no cross-site tracking, and no third-party marketing pixels — which is why you have not been asked to accept a cookie banner.
The cookies we set
| Cookie | What it does | Lifetime |
|---|---|---|
cs_sessionPhotographers (account holders) | Keeps you signed in to your GalleryLink account. A signed token (JWT) that identifies your session; it is not readable by JavaScript. | 30 days |
gl_authPhotographers (account holders) | A single flag (“1”) that tells the page you are signed in, so the header renders the right links before the page paints instead of flashing the wrong ones. Contains no identifier and no personal data. | 30 days |
cs_gallery_<gallery>Clients viewing a password-protected gallery | Records that you entered the correct password for one specific gallery, so you are not asked again on every photo. One cookie per gallery, and it grants access to that gallery only. | 7 days |
cs_visitorClients viewing a gallery | An anonymous random id for your browser so a client's favorites and album selection persist across reloads without anyone creating an account — and so the photographer's gallery stats can count unique visitors rather than raw hits. It is not linked to a name, email, or any profile, and is never used to track you across other sites. | 1 year |
Why there is no cookie banner
Under the EU ePrivacy rules, consent is required for cookies that are not strictly necessary for a service the user has requested. Each cookie above exists solely to deliver a function you asked for: staying signed in, getting past a gallery password you were given, or having your favorites remembered while you pick photos. None of them profile you or follow you to other websites, so none of them require consent. If we ever add a cookie that does, we will ask first.
Analytics
Where we measure site traffic, we use Cloudflare Web Analytics, which is cookieless: it sets no cookie, assigns no persistent identifier, and does not fingerprint your device. We use no Google Analytics, no advertising trackers, and no social-media pixels.
Third parties that see a request
Photos and videos in a gallery are served directly from Google Drive, because GalleryLink never copies or proxies your media. When a gallery loads, your browser therefore requests images from Google, and Google receives that request — including your IP address — as it would for any image hosted there. Google may set its own cookies under its own policies; we cannot set or read them. The same applies to a small support widget we load on our marketing pages. See our sub-processor list for the full set of providers.
Controlling cookies
You can delete or block cookies in your browser settings at any time. Be aware that blocking them will sign you out, will make a password-protected gallery ask for the password on every visit, and will stop your favorites from being remembered.
Questions
Email gallerylinklive@gmail.com. See also our Privacy Policy.