Cookies
Cookies Policy
Version: 2.0 of 20 October 2026
Platform: GoUpTower (https://gouptower.com)
Privacy Contact: gdpr@gouptower.com
Version history
Changes in this version: the inventory now lists every cookie and every item kept in your browser's storage, the files loaded from other services, and the legal basis for each.
SECTION 1. WHAT ARE COOKIES?
1.1. Cookies are small text files stored on your computer or mobile device when you visit a website. Local storage and session storage are similar: they keep small pieces of information in your browser. They allow the website to recognise your session, keep it secure, remember your choices and, with your consent, measure how it is used.
1.2. Legal basis. Under Article 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej) and Article 5(3) of the ePrivacy Directive, storing information in your browser, or reading it, needs your consent unless it is strictly necessary for a service you asked for. GoUpTower therefore uses strictly necessary cookies and preferences without asking, and loads Google Analytics and Google Ads only after you choose Accept All. Where personal data is involved, the Privacy Policy applies.
SECTION 2. COMPREHENSIVE COOKIE INVENTORY
2.1. Cookies
| Cookie Name | Provider / Origin | Purpose & Function | Type & Expiration |
|---|---|---|---|
| PHPSESSID | GoUpTower (First-Party) | Essential. Keeps you signed in, carries the security token that protects forms against cross-site request forgery, and remembers which of a company's tracked links brought you to an offer until you leave. | Session (deleted when the browser closes). |
| gut_signed_in | GoUpTower (First-Party) | Essential. Tells the website's own scripts that you are signed in, so that pages do not ask the server about a timer or notices for visitors who have none. Contains only "1". | Session. |
| cookie_consent | GoUpTower (First-Party) | Essential. Remembers your choice in the cookie banner (Accept All or Essential Only) so you are not asked on every page. | Persistent (1 year). |
| gut_tour_nudge | GoUpTower (First-Party) | Preference. Remembers that you hid the reminder about the introductory walk-through. | Persistent (30 days). |
| copy-toast-state | GoUpTower (First-Party) | Preference. Remembers the "link copied" notice of the share button on job offer cards. | Session. |
| _ga, _ga_* | Google Analytics (Third-Party) | Counts visits and shows how the website is used: pages, session length, approximate country. Set only after you choose Accept All. | Persistent (2 years). |
| _gcl_au | Google Ads (Third-Party) | Measures whether an advertisement led to a registration or purchase. Set only after you choose Accept All. | Persistent (90 days). |
2.2. Browser storage (kept in your browser, never sent to GoUpTower)
| Name | Kind | Purpose | How long |
|---|---|---|---|
| gut-theme | Local storage | Your light or dark theme. | Until you clear it. |
| gut-app-banner-hidden | Local storage | That you closed the banner about the iPhone app. | 30 days. |
| gut_wfg_lang, gut_wfg_3dq | Local storage | Wind Farm Builder: the language and the 3D quality you chose. | Until you clear it. |
| gut_wfg_signin | Session storage | Wind Farm Builder: that you were already asked to sign in to save your game, so you are asked once. | Until the tab closes. |
| Game progress | Local storage | Wind Farm Builder: a game played without an Account, so it continues where you left it. | Until you clear it or save it to an Account. |
The administration panel keeps a few more display settings of the same kind for administrators only.
SECTION 3. THIRD-PARTY SCRIPTS AND FILES
3.1. Google Analytics: Integrated to analyse how the website is used. It is loaded only after you choose Accept All in the cookie banner. Google Analytics 4 does not log or store IP addresses.
3.1a. Google Ads conversion measurement: Loaded together with Google Analytics, and likewise only after Accept All, to measure whether an advertisement led to a registration or purchase. Google Ireland Limited acts as an independent controller for its own purposes. The GoUpTower App does not load either script.
3.2. Files from other services, without cookies. Some files are fetched by your browser from other services: webfonts from Google Fonts, scripts and icons from Cloudflare (cdnjs), the Leaflet map library from unpkg.com, and map tiles from OpenStreetMap on the training-centre map and the airports board. They place no cookies, but, as with any file a browser fetches, they see your IP address and browser. The Privacy Policy (Section 4) names them.
3.3. Use my location. In the Time Tracker, the "Use my location" button sends your position from your browser to OpenStreetMap's Nominatim service to find the town name. It happens only when you press it and after your browser has asked your permission.
SECTION 4. HOW TO CONTROL AND DISABLE COOKIES
4.1. The cookie banner. Until you make a choice, and if you choose Essential Only, only essential cookies and preferences are used and nothing is loaded from Google Analytics or Google Ads. Choosing Accept All loads them. You can change or withdraw your choice at any time with the Cookies link in the footer of the website; choosing Essential Only also removes the Google cookies from your browser. Withdrawal does not affect processing already carried out.
4.2. Users can also control, block, or delete cookies and site data via their browser settings at any time:
- Google Chrome: Settings > Privacy and security > Third-party cookies, or Site settings > Cookies and site data.
- Mozilla Firefox: Settings > Privacy & Security > Cookies and Site Data.
- Apple Safari: Settings > Privacy > Manage Website Data.
- Microsoft Edge: Settings > Cookies and site permissions.
4.3. Impact of disabling cookies: Disabling essential first-party cookies (PHPSESSID) will prevent signing in and block access to the User Dashboard and the offer view limits. Clearing browser storage only resets your preferences, and a game played without an Account.
4.4. The App. The GoUpTower app for iPhone uses no cookies for analytics or advertising; what it keeps on the device is described in the Privacy Policy (Section 2).