Cookies and storage

Policy update in progress. We're finalizing our service policies. Current contact details and request options are available below.

Storage included in this build

Ownserva uses first-party sign-in/session cookies (normally up to seven days, subject to renewal/revocation), Auth.js security cookies for CSRF, OAuth state and callback handling, and a one-time terms-acceptance cookie lasting up to fifteen minutes during OAuth registration. The session cookie is HttpOnly and Secure in production. Signing out removes the current sign-in session.

Optional first-party analytics count public page views and new 30-minute browser visits only after you accept them. We store aggregate daily counts, not IP addresses, referrers, account IDs or browsing profiles in these analytics tables. Anonymous session hashes expire after 30 minutes and deduplication IDs are removed after 24 hours by scheduled maintenance. Google/GitHub and payment-provider pages have their own notices when you choose to visit them. Operator-added integrations require a separate assessment and, where required, prior optional consent with an equally accessible refusal and withdrawal choice.

Your cookie preference is remembered for up to 180 days. An optional HttpOnly visit cookie lasts up to 30 minutes. Use Cookie preferences in the footer to refuse or withdraw optional analytics at any time. Global Privacy Control and Do Not Track signals disable this analytics collection.

Strictly necessary security storage is not presented as optional advertising consent. Browser controls can clear storage, but disabling necessary cookies prevents sign-in.