Cookie Notice
Version 1.1 · Effective 2026-05-30
AllStak uses essential cookies to provide and secure the service. We also use Google Tag Manager on the website to understand visits and improve the experience. We do not use advertising cookies.
1. What is a cookie
A cookie is a small text file your browser stores on behalf of a site. We use a few of them to keep you signed in, remember your language, and protect requests from cross-site forgery. We also use closely-related browser storage (localStorage) for the same kinds of purposes — this notice covers both.
2. Categories we use
We use strictly necessary cookies for sign-in, security, and preferences. We also load Google Tag Manager on the website to measure visits and basic page interactions. We do not use advertising cookies or session-replay cookies.
3. The cookies we set
| Name | Domain | Purpose | Lifetime |
|---|---|---|---|
| access_token / id_token | .allstak.sa | Authenticated session; sent only to first-party AllStak origins. | Session |
| refresh_token | .allstak.sa | Refreshes your access token without re-login. HTTP-only, Secure, SameSite=Lax. | Up to plan's session window |
| XSRF-TOKEN | app / admin / api | Cross-site request forgery protection on state-changing requests. | Session |
| theme, locale (localStorage) | first-party | Remembers your dark/light preference and language across visits. | Until cleared |
| Google Tag Manager | googletagmanager.com | Loads website analytics tags so we can understand visits and improve public pages. | Set by Google or tags loaded through GTM |
4. Third-party cookies
AllStak loads Google Tag Manager on the website. We do not use advertising, A/B testing, session-replay, or social-media tracker scripts. If we add new tracking categories, we will update this notice, raise the version, and request your consent where the law requires it.
5. How to control cookies
- You can clear or block cookies from your browser settings.
- Blocking strictly-necessary cookies (auth, CSRF) will prevent you from signing into the dashboard.
- Signing out from the dashboard clears your session cookies on the AllStak origins.
6. Changes to this notice
If we change what we set, we will update the version and effective date above. For changes that require consent, you will be prompted in the dashboard.
7. Contact
Questions: [email protected].