This Cookie Policy explains how Individual Entrepreneur Evgenii Salamatov (identification number 324080203, country of Georgia), the operator of the gtm-api.com platform (the "Service"), uses cookies and similar technologies when you visit our website, sign in to your account dashboard, or otherwise interact with our properties. gtm-api.com is an MCP-first GTM API for AI agents, a single unified API for LinkedIn automation, email outreach, and data enrichment. This policy focuses on the small web surface where browser-based tracking actually happens: our marketing site and the authenticated account dashboard. It does not govern programmatic API traffic, which is authenticated with API keys rather than cookies.
Effective date: 2026-06-22
Read this policy alongside our Privacy Policy, which describes the broader categories of personal data we handle as a controller (your account identity, API keys, billing data, and logs) and as a processor (the B2B prospect and contact data our customers target through the API).
1. What cookies and similar technologies are
A cookie is a small text file that a website asks your browser to store on your device. When you return, the browser sends that file back, which lets the site recognise your session, remember settings, or measure how the site is used. Cookies set by the domain you are visiting are called first-party cookies; cookies set by another domain whose resources load on the page (for example, our infrastructure provider) are called third-party cookies.
"Similar technologies" covers other mechanisms that read from or write to your device, including browser localStorage and sessionStorage, pixels, and software development kit identifiers. We mention these where relevant because some preferences we store, notably your dark or light theme choice in the dashboard, are kept in browser localStorage and are not cookies at all.
2. Categories of cookies we use
We group what we set into three categories: strictly necessary, functional, and analytics/advertising. Strictly necessary cookies are always on; analytics and advertising cookies are set only after you consent.
Strictly necessary
These are required for the Service to function and cannot be switched off through our interface. They handle signing you in, keeping your authenticated session alive as you move between pages, protecting forms and login from automated abuse, routing your requests through our security and content-delivery layer, and serving cached pages correctly. Because they are essential to delivering a service you have requested, they do not require consent under applicable law.
Functional / preferences
These remember choices you make so the dashboard behaves the way you left it, for example, an interface or locale preference. Where such a preference is technically a stored value rather than a transmitted cookie, we keep it in browser localStorage on your own device.
Analytics and advertising
Analytics cookies help us understand, in aggregate, how visitors find and use our site so we can improve it, which pages are viewed, how people navigate, and where errors occur. Advertising cookies let us measure campaigns and reach relevant audiences on third-party platforms such as Google and Meta. These cookies are not strictly necessary, so we set them only after you consent through our cookie banner, and you can withdraw consent at any time.
3. Cookies we set (and what we store outside cookies)
The table below lists the specific cookies and storage items in use as of 2026-06-22. Exact names, providers, and durations can change as we update our infrastructure; treat this as a representative inventory rather than a frozen list.
| Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| gtm_session | gtm-api.com (first party) | Maintains your browsing session on the marketing site and dashboard; ties together page requests within a single visit. | Session (deleted when the browser closes) | Strictly necessary |
| gtm_auth | gtm-api.com (first party) | Holds the authenticated session reference after you sign in to the dashboard, so you stay logged in across pages. | Up to 30 days, or until sign-out | Strictly necessary |
| XSRF-TOKEN | gtm-api.com (first party) | Anti-CSRF token that protects form submissions and dashboard actions against cross-site request forgery. | Session | Strictly necessary |
| __cf_bm | Cloudflare, Inc. (third party) | Set by Cloudflare to tell automated traffic apart from real visitors as part of the protection that shields the site. | About 30 minutes | Strictly necessary |
| cf_clearance | Cloudflare, Inc. (third party) | Set by Cloudflare to remember that your browser already cleared a security check, so you are not asked to repeat it on later requests. | Up to 1 year | Strictly necessary |
| _lscache_vary | gtm-api.com (LiteSpeed cache, first party) | Tells the LiteSpeed page cache which variation of a page to serve (for example, logged-in versus logged-out) so cached content is correct. | Session | Strictly necessary |
| cmplz_banner-status | gtm-api.com (first party, via our consent-management tool) | Remembers that you have dismissed the cookie banner so it is not shown again on every visit. | 365 days | Strictly necessary |
| cmplz_consented_services, cmplz_saved_categories, cmplz_saved_services | gtm-api.com (first party, via our consent-management tool) | Record which cookie categories and services you accepted or rejected, so we can honour your choice. | 365 days | Strictly necessary |
| cmplz_policy_id | gtm-api.com (first party, via our consent-management tool) | Records the version of the cookie policy you consented to, so we can ask again if the policy changes materially. | 365 days | Strictly necessary |
| theme (localStorage, not a cookie) | gtm-api.com (first party) | Stores your dark / light interface preference on your own device. This is a browser localStorage value, not a cookie, and is never transmitted to our servers. | Until you clear browser storage | Functional / preferences |
| _ga, _ga_*, _gid | Google LLC (third party) | Google Analytics, measures, in aggregate, how the site is found and used. | Up to 2 years | Analytics (consent) |
| _fbp | Meta Platforms, Inc. (third party) | Meta Pixel, measures ad conversions and builds advertising audiences. | About 3 months | Advertising (consent) |
| amplitude_* (cookie / localStorage) | Amplitude, Inc. (third party) | Product analytics, understands feature usage in the dashboard. | Up to 1 year | Analytics (consent) |
| _ench and similar | Encharge (third party) | Associates website activity with lifecycle and marketing email. | Up to 1 year | Analytics / marketing (consent) |
Exact names and durations set by these third-party providers are controlled by them and can change, so treat the entries above as representative rather than a frozen list. We load these analytics and advertising tags only after you consent.
4. Third-party cookies
Some cookies are placed by service providers whose technology runs as part of our site. The main third party is Cloudflare, Inc., which provides our content delivery network, web application firewall, and DNS. Cloudflare's cookies (such as __cf_bm and cf_clearance) are used to keep the Service secure and available, and their behaviour is governed by Cloudflare's own privacy and cookie notices.
Where you consent, we load analytics and advertising tags from Google (Google Analytics and Google Ads), Meta (the Meta Pixel), Amplitude (product analytics), and Encharge (lifecycle email), each of which may set its own cookies subject to that provider's own privacy and cookie notices. We do not load these tags before you consent where consent is required, and you can withdraw consent at any time.
Disclaimer: Individual Entrepreneur Evgenii Salamatov runs gtm-api.com independently of LinkedIn Corporation and is not endorsed by it. We set no LinkedIn cookies in your browser; LinkedIn cookies appear only when you visit LinkedIn yourself, outside our Service. LinkedIn is a trademark of its owner.
5. How to manage or disable cookies in your browser
You are in control of cookies stored on your device. Most browsers let you view, delete, and block cookies through their settings, and offer options such as blocking third-party cookies or clearing site data on exit. Help pages for the major browsers, Chrome, Firefox, Safari, and Edge, describe exactly where these controls live.
You can also clear localStorage (which holds your theme preference) through the same browser data-clearing controls. Please note that if you block or delete strictly necessary cookies, core parts of the Service, signing in, staying logged in, and our security checks, may stop working correctly. Blocking only analytics cookies will not affect your ability to use the dashboard.
6. Consent
When required by law, we ask for your consent before setting any non-essential cookies (such as analytics cookies). On your first visit you will see a cookie banner that lets you accept or reject these categories; strictly necessary cookies are set regardless because the Service cannot run without them. You can change or withdraw your choice at any time by reopening the cookie preferences from our website, or by clearing cookies in your browser. Withdrawing consent does not affect the lawfulness of any processing carried out before you withdrew it.
7. Changes to this policy
We may update this Cookie Policy as our Service, providers, or legal obligations evolve. When we make material changes, we will revise the effective date above and, where appropriate, notify you through the Service. We encourage you to review this page periodically.
8. Contact us
If you have questions about this Cookie Policy or how we use cookies, please contact us:
- Privacy enquiries: [email protected]
- Data protection: [email protected]
- General support: [email protected]
- Legal: [email protected]
Controller: Individual Entrepreneur Evgenii Salamatov, identification number 324080203, country of Georgia. Registered office: Abi (down the lake), Akhaltsikhe District, Georgia.