Cookies

Last updated: 16 June 2026. This page lists every category of browser storage OneTouch uses today, what each one stores, and how to change your preferences at any time.

Every visitor is defaulted to Necessary only — that is, the essential authentication cookie plus standard local-storage preferences. Anonymous first-party usage analytics only run if you accept the Analytics category. We don’t run advertising cookies or third-party trackers.

• Essential

  Active

  These keep the product running. We use a single first-party session cookie for signed-in authentication and a small set of security tokens to prevent abuse. Without these you can't log in or stay guarded against credential-stuffing attempts.

  What’s stored

  Supabase session cookie, CSRF tokens, theme preference (light / dark).

  Retention

  Cleared when you sign out, when the session cookie expires, or when you close the browser.

• Preferences

  Active

  These remember your choices on this device. We store the clubs and players you follow, dismissed onboarding banners, and the last route you visited so the product feels like yours on return. When you sign in, those preferences sync to your account.

  What’s stored

  Followed-club list, dismissed promos, last route, segmented-control state.

  Retention

  Until you clear local storage, sign out and stay signed out past a year, or reset cookie preferences from this page.

• Analytics

  Opt-in

  Off unless you accept it. When on, OneTouch records anonymous first-party interaction events (which surfaces you view, taps, time on a card) to improve the product. No third-party trackers, no advertising, no cross-site profile.

  What’s stored

  One anonymous session id (ot_analytics_sid) in local storage, created only after you opt in; events are sent in batches to our own /api/track endpoint. Server logs also retain hashed IP + route for one week for error monitoring.

  Retention

  Clear local storage or choose Necessary only to stop it — the session id is not re-created without a fresh opt-in.

• Marketing

  Not active

  We don't use advertising cookies, third-party ad trackers, or cross-site fingerprinting. OneTouch runs no ads and has no plans to.

  What’s stored

  Nothing today, in any form.

  Retention

  We won't enable this category without an explicit opt-in. The toggle is here so the consent record can carry that fact forward.

Want to change your mind? The button below clears the local consent record; the banner at the bottom of any page will then ask again on your next visit.

See the Privacy policy for the broader data-handling story, or email onetouchapphq@gmail.com with questions.