Cookie Policy
Last updated 2026-09-03
What we use
Get Bearings uses only the cookies needed to run the service. There are no advertising cookies and no cross-site tracking or ad-network pixels: consistent with how we're paid (by families, never by advertisers or care providers).
Essential cookies
We set two cookies on every visit to protect the site, whether or not you're signed in. When you sign in, we also set a secure session cookie so you stay logged in and your intake and report are tied to your account, plus a few more short-lived cookies that carry you through the sign-in flow. Sign-in uses email links, not passwords. All of these cookies are strictly necessary, the site can't work without them, so none of them require consent. Signing out, or letting it expire, clears the session cookie. The two cookies set on every visit clear on their own when you close your browser.
| Name | Purpose | Duration |
|---|---|---|
| __Host-authjs.csrf-token | Protects the site against cross-site request forgery. Set on every visit, signed in or not. | Browser session. Cleared when you close your browser. |
| __Secure-authjs.callback-url | Remembers the page to redirect you back to after signing in. Set on every visit, signed in or not. | Browser session. Cleared when you close your browser. |
| __Secure-authjs.session-token | Keeps you signed in. | Lasts 24 hours, or 30 days if you chose to stay signed in, and renews while you use the site. |
| gb_remember_me | Remembers whether you checked "Keep me signed in for 30 days" while you click the sign-in link in your email. | 10 minutes |
| gb_pending_email | Shows "We sent a sign-in link to" your email address on the verify page. | 10 minutes |
| gb_pending_callback | Sends you to the right page after you sign in. | 10 minutes |
| gb_turnstile_ok | Confirms you passed our bot-verification check before we send your sign-in link. Only set when that check is turned on. | 2 minutes |
Analytics
On our public pages, before you sign in, we use Microsoft Clarity and Google Analytics to understand how visitors find and use the site. This never runs inside the signed-in app or your intake, where you write about your family's care situation. If you visit from the EU, the UK, or the EEA, we ask for your consent first, and nothing loads until you accept. Declining is remembered and respected. Outside those regions, analytics runs by default, and this page is that update. If your browser sends the Global Privacy Control signal or Do Not Track, we treat that as an opt-out everywhere, no matter where you're visiting from. Text you type into the contact form is masked before it reaches Microsoft, so what you write there is never included in what gets recorded.
| Name | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics. Distinguishes visitors to our public pages. | 2 years |
| _ga_* | Google Analytics. Persists session state on our public pages. | 2 years |
| _clck | Microsoft Clarity. Recognizes the same visitor across visits to our public pages. | 1 year |
| _clsk | Microsoft Clarity. Groups your page views on our public pages into one visit. | 1 day |
| gb_analytics_consent_v1 | Stored in your browser, not a cookie. Remembers whether you accepted or declined analytics, for visitors we ask. | Until you clear your browser's stored data |
When Clarity loads, Microsoft may also set its own cookies on its own domains, including MUID, CLID, ANONCHK, MR, and SM. These are Microsoft's cookies, not ours, so they're not in the table above. Microsoft's own privacy statement covers what they do with them, not this page.
What we don't use
No advertising or retargeting cookies. No selling or sharing of your information with data brokers or ad networks. Analytics never runs inside the signed-in app or the intake where you describe your family's situation, only on the public pages described above.
Managing cookies
You can clear or block cookies in your browser settings, but blocking the essential session cookie will prevent you from signing in and using the audit.
Questions
Questions about cookies or privacy? See our Privacy Policy or reach us through the contact page.