Privacy
This demo measures visits only for the visitors who allow it. Page analytics are off by default: nothing is stored, no analytics request is sent and no third-party tag loads until you choose to turn them on.
Two things record the page you opened:
- A first-party page view on this demo's own backend: the public page path, the campaign source, medium, campaign and content from the link you followed, and the origin of an external referrer. Your raw IP address is not stored. The server derives a visitor key from it together with the browser's user-agent, and that key rotates every day.
- Google Analytics 4, in the Gax Google Analytics property, with advertising signals and ad personalisation denied. Our own event sends the page location, the referring origin and the same campaign values, including the campaign term when the link carries one. Google's tag also sends the ordinary cookie, device and network metadata it collects for any property, so the measurement is not limited to those fields.
With your analytics consent, a campaign-only cookie on gax.sh can carry campaign values between gax.sh and demo.gax.sh for 30 days, so the campaign you arrived on continues between pages. It holds campaign values only: no name, email, address, cart token or account handle. Google keeps its own measurement client id across gax.sh and demo.gax.sh.
- Admin, account and sign-in pages, the checkout and order receipt pages, and any path that is not one of the public demo pages
- Query values other than the five campaign parameters, and any campaign value that is not 1–64 letters, digits or
. _ ~ + - - Checkout fields, order identifiers, cart or session tokens
- Anyone whose browser sends Do Not Track or Global Privacy Control: the control is disabled and no hit is sent
The analytics control in the footer of every page turns measurement on or off. Turning it off removes the stored campaign, clears the Google Analytics cookies on this host and on the parent gax.sh domain, stops the tag and reloads the page once so nothing already running keeps collecting. Turning it back on records one new page view.
A choice is saved only when this browser lets the page store and read it back. If storage is blocked or the saved value does not come back, the page fails closed: it stops collecting, the control says the choice was not saved, and that choice applies to the page you are on rather than being claimed as remembered.
Analytics reports cover consenting visitors only. They are not a count of everyone who visited, and no total population figure is claimed from them.
The demo shop itself
The catalogue, stock, cart, checkout and orders are synthetic services on this demo's own PostgreSQL database. Orders you place are captured as held test orders in the native admin. Do not enter real personal data, real addresses or card details: there is no card field, and the address you submit is stored in the demo database.
Operator sign-in
The shop is open to explore. Admin access is by invitation. Use your invited operator email to sign in.
This is a demonstration shop, not a live store. For questions about privacy at Gax, read the Gax privacy notice or email hello@gax.sh.