§ — Legal · Cookie Policy

We use four cookies.

No ad networks. No trackers. No "200 partners may use cookies" banners. Four small files that keep you logged in, remember your preferences, and help us count how many people visited the homepage.

§ — The short version

Here's the honest summary.

  • We don't use cookies for advertising. Full stop. We don't even run ads.
  • Three of our four cookies are strictly necessary — without them you can't log in or maintain a session.
  • One is analytics, first-party only, and you can turn it off with the toggle at the bottom of this page.
  • No third-party trackers fire on our marketing site or in the product. We're boring on purpose.

Every cookie we set.

This is the complete list — if it's not here, we don't set it. Any change to this list is published at least 14 days before it takes effect.

Cookie
Purpose
Duration
Category
Sessionocc_session
Keeps you logged into your workspace. Contains an opaque session token, nothing else. Httponly, Secure, SameSite=Lax.
Session
Necessary
CSRF tokenocc_csrf
Prevents cross-site request forgery attacks against authenticated sessions. Required for every state-changing request.
Session
Necessary
Preferencesocc_prefs
Remembers UI preferences like theme, sidebar collapsed state, and recently-viewed workspace. Stored locally; never transmitted to third parties.
1 year
Necessary
Analyticsph_*
PostHog first-party analytics — anonymous visitor ID and event tracking for product usage. Lets us see which features help reps improve. No cross-site tracking.
1 year
Analytics

How to control cookies.

You have three ways to say no to our analytics cookie. The necessary ones can't be turned off and still let you use the Service — that's the trade-off of logging in at all.

§ 01 · In-product

Account settings toggle.

Logged-in users can disable analytics in Settings → Privacy. The setting persists across sessions and devices.

§ 02 · Cookie banner

First-visit banner.

EU, UK, and California visitors see a consent banner on first visit. Reject analytics there and we won't set the cookie.

§ 03 · Browser controls

Do Not Track & GPC.

We honor both the legacy Do Not Track header and the Global Privacy Control signal. If your browser sends either, analytics stays off.

Questions about cookies?

This is a short policy on purpose. If something is unclear or you'd like more detail, the privacy team will reply.

privacy@oneclickcoaching.com →