Legal
Cookie Policy
Version 1.1 · Effective 24 October 2026 · Last updated 24 October 2026
1. What this Policy covers
This Cookie Policy explains how Headshot Marketing Pvt. Ltd. ("GGNomad", "we", "us") uses cookies, local storage, session storage, IndexedDB, pixels, web beacons and similar technologies ("cookies") on the GGNomad website at ggnomad.com, the product frontend at app.ggnomad.com, and the GGNomad mobile applications (where they store local state). It supplements our Privacy Policy.
2. What these technologies are, and how we categorise them
A cookie is a small text file your browser stores for a website. Local storage and session storage are similar browser features that keep small values on your device. We use three categories:
- Strictly necessary — needed to operate the site or product: keeping you signed in, single sign-on across Burdenoff products, bot protection, and remembering the privacy choices you make. You cannot switch these off and still use the Service.
- Functional — remember your preferences, such as theme and region, so the site and product behave the way you set them up.
- Analytics — measure how the site and product are used so we can fix problems and prioritise improvements. We do not sell this data or use it for advertising.
We do not use advertising or marketing cookies, and we do not use any of these technologies to profile travelers, guests or hosts for advertising.
3. What we store
The GGNomad website itself sets no cookies on an ordinary visit. The table below lists everything the website and the product store on your device.
| Cookie / storage key | Where | Category | Purpose | Duration |
|---|---|---|---|---|
| ggnomad-theme (local storage) | ggnomad.com | Functional | Remembers light, dark or system theme | Until cleared |
| ggnomad-cookie-analytics, disable-rybbit (local storage) | ggnomad.com | Strictly necessary | Records your analytics choice; the second key is set only when you switch it off | Until cleared |
| rybbit-visitor-id (local storage) | ggnomad.com, app.ggnomad.com | Analytics | Anonymous identifier Rybbit may keep to count returning visits | Until cleared |
| Sign-in session (local storage) | app.ggnomad.com, app.burdenoff.com | Strictly necessary | Keeps you signed in and provides single sign-on across Burdenoff products | Until you sign out or the session expires |
| burdenoff-geography (local storage) | app.ggnomad.com | Functional | Remembers your region for currency and regional defaults | Until cleared |
| bf-event-device-id (local storage), bf-event-session-id (session storage) | app.ggnomad.com | Analytics | Groups product usage and error events by device and visit | Until cleared / end of the browser session |
| __cf_bm, cf_clearance (cookies) | Cloudflare, on either site | Strictly necessary | Bot management and security-challenge state, set only when Cloudflare challenges a request | 30 minutes for __cf_bm; up to the challenge period for cf_clearance |
We review this list whenever we add a provider or a new kind of storage. We do not load third-party advertising cookies, retargeting pixels, social "share" pixels, or fingerprinting beyond what Cloudflare uses for bot mitigation.
4. Rybbit — our website and product analytics
We use Rybbit, a privacy-focused analytics service provided by Tomato.gg LLC (United States), on the website and in the product. Rybbit sets no cookies and does not store IP addresses; it uses an IP address only briefly to derive country and region.
- Events recorded include page views, searches, listing views, booking-funnel steps, errors and aggregate funnel data.
- We may export analytics data for our own analysis and dashboarding. We do not sell analytics data or user-level behavioural profiles to any third party, and we do not share user-level analytics with advertising networks.
- Rybbit is listed on our Subprocessors page.
5. Your choices
- No banner, because there is nothing optional to accept first. We set no advertising or marketing cookies. Website analytics is cookieless and runs unless you switch it off.
- Switch off website analytics at any time in our cookie preferences centre. The choice is stored in your browser and applies from your next page load.
- Global Privacy Control. If your browser sends a GPC signal, the website switches analytics off automatically unless you have turned it on yourself. We honour GPC as an opt-out of "sale" or "sharing" where US state law requires; we do not sell personal information.
- Product analytics. Inside the signed-in product, usage analytics is part of operating and securing the Service. To object, write to [email protected].
- Your browser. You can clear or block cookies and site storage in your browser settings, or use private browsing. Clearing strictly necessary storage signs you out of the product.
6. Legal basis
Strictly necessary storage is used because the Service cannot work without it. Functional storage keeps the preferences you set. Analytics relies on our legitimate interest in understanding and improving the Service, which we balance by keeping it cookieless, not storing IP addresses, never using it for advertising, and letting you switch it off. In India we give notice through this Policy and the Privacy Policy, consistent with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.
7. Do Not Track
There is no industry consensus on "Do Not Track" (DNT). We do not respond to DNT signals, but we honour Global Privacy Control as set out in Section 5.
8. Changes to this Policy
We update this Cookie Policy when we add a provider or a new kind of storage. If a change introduces optional cookies or tracking that needs your consent, we will ask for that consent before setting them, and notify account holders by email or an in-product notice. The current version is always at ggnomad.com/cookies.
9. Contact
Questions about cookies and tracking: [email protected]. For our full registered details and grievance officer, see the Privacy Policy.