Cookies

Last updated: 12 November 2026. This page lists every category of browser storage OneTouch uses today, what each one stores, and how to change your preferences at any time.

Every visitor is defaulted to Necessary only — that is, the sign-in cookie and the on-device storage the product needs to work (your follows, saves and reminders), plus two optional conveniences you can switch off. Anonymous first-party usage analytics only run if you accept the Analytics category. We don’t run advertising cookies or third-party trackers.

• Essential

  Active

  These keep the product running. We use a single first-party session cookie for signed-in authentication and a small set of security tokens to prevent abuse. The product itself also keeps a few things on your device because it cannot work without them: the clubs and players you follow, saved stories, match reminders and your onboarding progress. When you sign in, your follows and saves sync to your account.

  What’s stored

  Supabase session cookie, CSRF tokens, theme (light / dark), followed clubs and players, saved stories, reminders, onboarding state, and small interface settings such as dismissed hints and panel layout.

  Retention

  The session cookie is cleared when you sign out or it expires. Follows, saves and reminders stay on your device until you unfollow or remove them, or clear your browser storage. They are not controlled by the cookie banner because the product does not work without them.

• Preferences

  Active

  Optional extras that only make the product a little more convenient: your list density choice and your recent searches. If you switch Preferences off, we stop saving these and ignore any already saved. Nothing else depends on this switch.

  What’s stored

  List density (hub:density) and recent searches, in local storage.

  Retention

  Until you clear local storage, switch Preferences off, or reset cookie preferences from this page.

• Analytics

  Opt-in

  Off unless you accept it. When on, OneTouch records anonymous first-party interaction events (which surfaces you view, taps, time on a card) to improve the product. No third-party trackers, no advertising, no cross-site profile.

  What’s stored

  One anonymous session id (ot_analytics_sid) in local storage, created only after you opt in; events are sent in batches to our own /api/track endpoint. Server logs also retain hashed IP + route for one week for error monitoring.

  Retention

  Clear local storage or choose Necessary only to stop it — the session id is not re-created without a fresh opt-in.

• Marketing

  Not active

  We don't use advertising cookies, third-party ad trackers, or cross-site fingerprinting. OneTouch runs no ads and has no plans to.

  What’s stored

  Nothing today, in any form.

  Retention

  We won't enable this category without an explicit opt-in. The toggle is here so the consent record can carry that fact forward.

Want to change your mind? The button below clears the local consent record; the banner at the bottom of any page will then ask again on your next visit.

See the Privacy policy for the broader data-handling story, or email [email protected] with questions.