Cookie Policy

    Last updated: July 17, 2026

    Effective: July 2026

    1. Overview

    This policy explains the cookies and similar technologies (such as browser local storage) that Opedd uses. We keep this deliberately minimal: today we use only what is necessary to sign you in and operate features you actively use. We do not use advertising cookies, and we do not track you across other websites. It should be read alongside our Privacy Policy.

    2. What We Set Today

    Under the Privacy and Electronic Communications Regulations (PECR), "cookies" covers both cookies and other storage read from or written to your device (including browser local storage). Here is everything we currently set:

    ItemTypePurposeCategory
    Authentication tokenLocal storageKeeps you signed in securely (set by our auth provider, Supabase)Strictly necessary
    Sidebar / interface preferenceCookieRemembers whether you collapsed the dashboard sidebar (signed-in app only)Functional
    In-app state (onboarding progress, dismissed notices, selection state)Local / session storageMakes features you are actively using work smoothly (signed-in app only)Functional

    All of the above are first-party, contain no advertising or cross-site identifiers, and are not shared with third parties for their own purposes.

    3. Strictly-Necessary

    Strictly-necessary cookies and storage are exempt from consent under PECR because the Service cannot function without them. Ours is the authentication token that keeps you securely signed in. Without it you could not use your account.

    4. Functional Storage

    We also store a small amount of first-party information to operate features you are actively using once signed in — remembering your dashboard layout preference, your onboarding progress, notices you have dismissed, and selections in progress. These carry no tracking and are used only to deliver the features you have requested. They are set only within the signed-in application, not for anonymous visitors to our public pages.

    5. Analytics

    We measure how our site and product are used at two distinct levels:

    Anonymous, cookieless measurement (always on, stores nothing on your device). By default we count page visits and product-flow steps using a measurement service (PostHog, EU-hosted) configured to hold data in memory only for the duration of the page visit: no cookies are set, nothing is written to your device's storage, no persistent identifier exists, and each visit uses a fresh random identifier that cannot be connected to your previous or future visits, to your account, or to you. This tells us that a page was visited or a step was completed — never who visited it. Because it sets no cookies and processes no personal identifiers, it does not require consent; we describe it here for transparency.

    Full analytics (strictly opt-in). Only if you accept analytics through our cookie banner — which offers an equally-prominent "reject" option — do we set analytics storage (cookies/localStorage) that gives your browser a persistent identifier, enables session replay for improving our onboarding, and, when you sign in, connects usage to your account. You can withdraw this consent at any time (see "Managing your choices" below), which returns you to the anonymous level. Rejecting the banner means you remain at the anonymous level: no analytics cookies or storage are ever set without your consent.

    6. No Advertising or Tracking

    We do not use advertising cookies, marketing pixels, or third-party tracking technologies (such as Google Analytics, advertising networks, or social-media pixels). We do not track you across other websites, and we do not sell or share your browsing information for advertising.

    7. Do Not Track & Global Privacy Control

    We treat a "Do Not Track" (DNT) or Global Privacy Control (GPC) signal from your browser as a valid refusal: where such a signal is present we set no analytics storage of any kind and we additionally disable even the anonymous, cookieless measurement described in section 5 — going further than the signal strictly requires. No banner consent overrides these signals on our site.

    8. Managing Cookies

    You can clear or block cookies and local storage through your browser settings at any time. Note that blocking the strictly-necessary authentication storage will prevent you from staying signed in. Guidance for common browsers is available at their respective help centres, and general information on cookies is available from the ICO at ico.org.uk.

    9. Changes

    We may update this policy, in particular if we introduce analytics or new features. Material changes — such as introducing any non-essential cookies — will be reflected here and, where required, gated behind a consent banner before those cookies are set.

    10. Contact

    Questions about this policy: hello@opedd.com. You also have the right to complain to the ICO (ico.org.uk).

    See also: Privacy Policy · Terms of Service