This page lists every cookie GrowTech Central sets, plus the browser-storage entries (localStorage and sessionStorage) that hold an identifier for you, your account or your device.
We set no analytics or advertising cookies. One cookie belongs to the referral programme: gt_ref, which is only set when you arrive through a referral link.
The login and security cookies below are set to provide the service you use, on the legal basis of performance of contract (UU PDP Art. 20(b)). This disclosure is provided per Art. 30(2).
| Name | Purpose | Retention | Set by |
|---|---|---|---|
| token | Your login session. Marked HttpOnly, so scripts on the page cannot read it. Set when you sign in, removed when you sign out. | 30 days, or until you sign out | GrowTech Central (first-party) |
| roleis_adminadmin_role_id | The role of the signed-in account (for example customer or admin) and its admin role number, used to send you to the right area of the site. Readable by scripts on the page. | 30 days, or until you sign out | GrowTech Central (first-party) |
| user_nameuser_email | The name and email address of the signed-in account. Set when you sign in, removed when you sign out, and readable by scripts on the page. | 30 days, or until you sign out | GrowTech Central (first-party) |
| gt_trusted_device | Set when you tick “Remember this device” while entering your OTP code, so your next sign-in on this browser can skip the code. HttpOnly. | 30 days (7 days for admin accounts) | GrowTech Central (first-party) |
| gt_oauth_exchange | A one-time code while you sign in with Google or Discord. HttpOnly. | 5 minutes; deleted once used | GrowTech Central (first-party) |
| gt_link_state | Ties linking a Google or Discord account to your profile to the browser that started it, so the link cannot be hijacked. HttpOnly. | 10 minutes | GrowTech Central (first-party) |
| gt_ref | The referral code from a ?ref= link you opened, so the person who shared it is recorded as your referrer when you sign up. The first link counts. Readable by scripts on the page, because the sign-up form reads it. | 30 days; deleted once you sign up | GrowTech Central (first-party) |
| NEXT_LOCALE | Remembers your language choice (Indonesian or English). | 12 months | GrowTech Central (first-party) |
| gt_spanduk_bahasa | Remembers that you closed the "available in Bahasa Indonesia" banner. | 12 months | GrowTech Central (first-party) |
| Name | Purpose | Retention | Set by |
|---|---|---|---|
| gt_consent_v1 | A record that you have seen the cookie notice (a flag and the time). | Until you clear this site's data | GrowTech Central (first-party, localStorage) |
| gt_referral_code | A copy of the referral code from a ?ref= link, for the same purpose as the gt_ref cookie. | 30 days; deleted once you sign up | GrowTech Central (first-party, localStorage) |
| gt_device_fingerprint_v1 | A SHA-256 hash of browser and device traits (browser, language, platform, processor cores, touch support, screen size, time zone). Sent with requests to our server so a device you asked us to remember can be recognised. | Until you clear this site's data | GrowTech Central (first-party, localStorage) |
| auth-me-profile-cache-v1 | A short-lived copy of your account profile, so pages do not keep requesting it again. | Gone when the tab closes; used for 2 minutes at most | GrowTech Central (first-party, sessionStorage) |
Beyond the entries above, the site uses browser storage for small things that only apply on this device, such as your cart, theme choice, last-used settings, and short-lived copies of page data so it is not reloaded over and over. Anything kept in sessionStorage is gone when the tab closes.
You can withdraw your acknowledgement at any time by clearing this site's data in your browser. That removes the gt_consent_v1 record, and the cookie notice shows again on your next visit. Withdrawing does not change which cookies are set; it only re-shows the notice. Clearing site data also removes the referral cookie and the stored referral code, and signs you out if you are signed in.
Operational categories may involve processors located in the United States or European Union. Categorical descriptions of those processors are listed in our Privacy Policy.