Cookie Policy

This Cookie Policy explains how ORGANIZING GROUP SRL, a Romanian limited liability company, registered with the Romanian Trade Registry under no. J22/1300/2015, having CUI/CIF 34809309 and VAT ID RO34809309, with registered office at Str. Mihail Sadoveanu 44, Valea Ursului, Iași, Romania ("CrystalSpec", "we", "us"), uses cookies and similar technologies on https://crystalspec.com, in the CrystalSpec application at app.crystalspec.com, and on pages that our customers build with CrystalSpec. Our Privacy Policy explains how we handle the personal data involved.

1. What Cookies and Similar Technologies Are

Cookies are small files stored on your device. Similar technologies include local storage, session storage, IndexedDB, pixels and scripts that read or store information on your device. Some are strictly necessary to provide a service you ask for and need no consent. Others are optional, and we use them only if you accept them.

2. Strictly Necessary Cookies and Storage

• bluelibs-token: holds your sign-in session. It is an httpOnly cookie, so scripts in the page cannot read it. It lasts 24 hours, or 30 days when you choose "Remember me", and is scoped to the parent domain so the application and the API share your session.
• bluelibs-auth: a companion flag with no secret content (its value is "1") that tells the application a session exists. It has the same lifetime and scope as the session cookie.
• crystalspec.adsConsent (local storage) on app.crystalspec.com, and crystalspec_consent (local storage) on crystalspec.com: remember your cookie choice and when you made it, so we do not ask on every visit. They stay until you change your choice or clear your browser storage.
• Bot protection at sign-up: when you create an account, Google reCAPTCHA Enterprise may set or read cookies and local storage on Google's domains, such as _GRECAPTCHA (up to 6 months), to tell people from automated abuse. We use it only on the sign-up page, to keep sign-up secure.

Blocking or deleting these will sign you out, or prevent sign-in, sign-up and other core features from working.

3. Preferences and Local Data in the Application

The application uses your browser's local storage, session storage and IndexedDB for what you would expect it to remember on this device: your theme, default workspace, onboarding progress, recently used items, view and layout settings, unsent drafts so that you do not lose work, and a cache of data you have opened so pages load faster. The cache is tied to your session and is not reused after you sign out. Sign-in credentials are never stored there. Clearing your browser storage resets these preferences and deletes unsent drafts.

4. Optional Cookies We Ask You About

We use the following only if you accept them in our cookie banner. Until you choose, they are not loaded.

• Advertising measurement on app.crystalspec.com: the Google Ads tag measures whether our ads lead to sign-ups. It sets first-party cookies such as _gcl_au and, if you arrived from one of our ads, _gcl_aw (up to 90 days), and Google may set or read its own cookies on Google's domains. We do not use it for remarketing or personalized ads.
• Website analytics on crystalspec.com: Google Analytics (cookies _ga and _ga_ followed by an identifier, up to 2 years) and PostHog, hosted in the EU (a ph_ cookie and local storage entry, up to 1 year), show us which pages are visited and which buttons are clicked.

Rejecting is as easy as accepting, and you can change your choice at any time: in the application, with Cookie choices in the help menu or at the end of this page; on crystalspec.com, with the Cookie choices link in the footer. Each site asks once and remembers its own choice. When you withdraw consent we stop using these tools and delete the first-party cookies they set. Cookies on Google's or PostHog's own domains are controlled through their settings and your browser.

5. Pages Built by Our Customers

Landing pages, shops, forms, booking pages and applications that customers build with CrystalSpec belong to those customers. They use the storage they need to work, such as a shop's cart in local storage. If a customer adds its own Google Analytics ID to a Landing page or shop, analytics data goes to that customer's Google Analytics property; the customer decides whether and how to ask for consent and is responsible for doing so. Published Landing pages load fonts from Google Fonts, which receives the visitor's IP address.

6. Other Providers' Pages

When you pay through Stripe Checkout, connect an account with Google, GitHub or another provider, or follow a link to another site, that provider's own cookie policy applies on its pages.

7. Your Browser Settings

You can also block or delete cookies and site data in your browser settings. Blocking strictly necessary cookies may prevent sign-in, billing, security or core features from working.

8. Changes

We may update this Cookie Policy as the Service and our providers change, and we will update the effective date. Before we use a new optional technology, we will ask for your consent again.

9. Contact

Questions about cookies can be sent to support@crystalspec.com.