GalleryLink sets five first-party cookies. Four are strictly necessary to make the Service work: keeping you signed in, letting you into a gallery whose password you were given, and remembering a client's favorites. The fifth, gl_src, remembers how you first arrived (a search, an article, or one of our ads) so we can tell which pages and campaigns bring people who sign up. We set no advertising or analytics cookies and no cross-site tracking, and we don't show a cookie banner.
The cookies we set
| Cookie | What it does | Lifetime |
|---|---|---|
cs_sessionPhotographers (account holders) | Keeps you signed in to your GalleryLink account. A signed token (JWT) that identifies your session; it is not readable by JavaScript. | 30 days |
gl_authPhotographers (account holders) | A single flag (“1”) that tells the page you are signed in, so the header renders the right links before the page paints instead of flashing the wrong ones. Contains no identifier and no personal data. | 30 days |
cs_gallery_<gallery>Clients viewing a password-protected gallery | Records that you entered the correct password for one specific gallery, so you are not asked again on every photo. One cookie per gallery, and it grants access to that gallery only. | 7 days |
gl_srcVisitors to gallerylink.live | Remembers how you first arrived at gallerylink.live: the site that linked you, the page you landed on, and any campaign tags in the link. If you came from one of our Google ads, it also keeps that ad's click id (gclid). If you then create an account, this is saved with it so we know which pages and ads bring people who sign up, and for sign-ups that came from an ad we may report the sign-up (and a later upgrade) back to Google Ads using that click id. First-party only; it holds nothing else about you. | 90 days |
cs_visitorClients viewing a gallery | An anonymous random id for your browser so a client's favorites and album selection persist across reloads without anyone creating an account — and so the photographer's gallery stats can count unique visitors rather than raw hits. It is not linked to a name, email, or any profile, and is never used to track you across other sites. | 1 year |
Why there is no cookie banner
Four of the cookies above exist only to deliver something you asked for: staying signed in, getting past a gallery password you were given, or having your favorites remembered while you pick photos. The fifth, gl_src, is first-party measurement: it doesn't follow you to other websites or build a profile, and we use it only to learn which of our pages and ads work. We use no advertising cookies, no analytics cookies and no cross-site trackers. If we ever add anything that needs your consent, we will ask first.
Analytics
Where we measure site traffic, we use Cloudflare Web Analytics, which is cookieless: it sets no cookie, assigns no persistent identifier, and does not fingerprint your device. We use no Google Analytics and no social-media pixels. On our marketing pages only, Google's ads tag runs in consent-denied mode: it sets no cookies and sends Google anonymous, cookieless signals, so we can see roughly which of our ads lead to sign-ups. It never runs on client galleries, studio pages or bio pages.
Third parties that see a request
Photos and videos in a gallery are served directly from Google Drive, because GalleryLink never copies or proxies your media. When a gallery loads, your browser therefore requests images from Google, and Google receives that request — including your IP address — as it would for any image hosted there. Google may set its own cookies under its own policies; we cannot set or read them. The same applies to a small support widget we load on our marketing pages. See our sub-processor list for the full set of providers.
Controlling cookies
You can delete or block cookies in your browser settings at any time. Be aware that blocking them will sign you out, will make a password-protected gallery ask for the password on every visit, and will stop your favorites from being remembered.
Questions
Email hello@gallerylink.live. See also our Privacy Policy.