Cookie Policy
Last updated: July 17, 2026
Effective: July 2026
1. Overview
This policy explains the cookies and similar technologies (such as browser local storage) that Opedd uses. We keep this deliberately minimal: today we use only what is necessary to sign you in and operate features you actively use. We do not use advertising cookies, and we do not track you across other websites. It should be read alongside our Privacy Policy.
2. What We Set Today
Under the Privacy and Electronic Communications Regulations (PECR), "cookies" covers both cookies and other storage read from or written to your device (including browser local storage). Here is everything we currently set:
| Item | Type | Purpose | Category |
|---|---|---|---|
| Authentication token | Local storage | Keeps you signed in securely (set by our auth provider, Supabase) | Strictly necessary |
| Sidebar / interface preference | Cookie | Remembers whether you collapsed the dashboard sidebar (signed-in app only) | Functional |
| In-app state (onboarding progress, dismissed notices, selection state) | Local / session storage | Makes features you are actively using work smoothly (signed-in app only) | Functional |
All of the above are first-party, contain no advertising or cross-site identifiers, and are not shared with third parties for their own purposes.
3. Strictly-Necessary
Strictly-necessary cookies and storage are exempt from consent under PECR because the Service cannot function without them. Ours is the authentication token that keeps you securely signed in. Without it you could not use your account.
4. Functional Storage
We also store a small amount of first-party information to operate features you are actively using once signed in — remembering your dashboard layout preference, your onboarding progress, notices you have dismissed, and selections in progress. These carry no tracking and are used only to deliver the features you have requested. They are set only within the signed-in application, not for anonymous visitors to our public pages.
5. Analytics
We measure how our site and product are used at two distinct levels:
Anonymous, cookieless measurement (always on, stores nothing on your device). By default we count page visits and product-flow steps using a measurement service (PostHog, EU-hosted) configured to hold data in memory only for the duration of the page visit: no cookies are set, nothing is written to your device's storage, no persistent identifier exists, and each visit uses a fresh random identifier that cannot be connected to your previous or future visits, to your account, or to you. This tells us that a page was visited or a step was completed — never who visited it. Because it sets no cookies and processes no personal identifiers, it does not require consent; we describe it here for transparency.
Full analytics (strictly opt-in). Only if you accept analytics through our cookie banner — which offers an equally-prominent "reject" option — do we set analytics storage (cookies/localStorage) that gives your browser a persistent identifier, enables session replay for improving our onboarding, and, when you sign in, connects usage to your account. You can withdraw this consent at any time (see "Managing your choices" below), which returns you to the anonymous level. Rejecting the banner means you remain at the anonymous level: no analytics cookies or storage are ever set without your consent.
6. No Advertising or Tracking
We do not use advertising cookies, marketing pixels, or third-party tracking technologies (such as Google Analytics, advertising networks, or social-media pixels). We do not track you across other websites, and we do not sell or share your browsing information for advertising.
7. Do Not Track & Global Privacy Control
We treat a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal from your browser as a valid refusal: where such a signal is present we set no analytics storage of any kind and we additionally disable even the anonymous, cookieless measurement described in section 5 — going further than the signal strictly requires. No banner consent overrides these signals on our site.
8. Managing Cookies
You can clear or block cookies and local storage through your browser settings at any time. Note that blocking the strictly-necessary authentication storage will prevent you from staying signed in. Guidance for common browsers is available at their respective help centres, and general information on cookies is available from the ICO at ico.org.uk.
9. Changes
We may update this policy, in particular if we introduce analytics or new features. Material changes — such as introducing any non-essential cookies — will be reflected here and, where required, gated behind a consent banner before those cookies are set.
10. Contact
Questions about this policy: hello@opedd.com. You also have the right to complain to the ICO (ico.org.uk).
See also: Privacy Policy · Terms of Service
