Last updated
The app sets the cookies it needs to keep you signed in and to protect your session; they cannot be switched off. Google Analytics cookies are set only after you accept them, on this website and in the app. Your choice itself is stored in your browser’s localStorage, not in a cookie, and you can change it at any time.
1. What this policy covers
Cookies are small files a website stores in your browser. This policy lists the cookies the Omnibo app and this website set, and the one localStorage entry that remembers your analytics choice. Neither the app nor this website runs advertising tags.
2. Cookies the Omnibo app needs
These cookies are strictly necessary: without them you cannot sign in or use your account safely, so they are set without asking. They are first-party cookies, set by the app, and none of them is used for tracking.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| access_token | Proves you are signed in on each request. | 15 minutes, renewed while you use the app | Necessary · httpOnly |
| refresh_token | Keeps you signed in by renewing the access token. | 7 days by default, renewed while you use the app | Necessary · httpOnly |
| session_id | Identifies this device’s session, so the device list in Settings can mark “this device”. | Same as refresh_token (7 days by default) | Necessary · readable by the app |
| csrfToken | Protects your account against cross-site request forgery: every change you make must carry it. | 24 hours | Necessary · readable by the app |
| oauth_state | Protects a Google Sign-In against forgery while you are away at Google. | 10 minutes | Necessary · httpOnly |
| oauth_event | Tells the app whether a Google Sign-In just signed you in or created your account. | 1 minute | Necessary |
| connector_nonce | Protects the connection of an integration (such as GitHub or Gmail) while you approve it at the provider. | 15 minutes | Necessary · httpOnly |
| impersonator_session | Set only for Omnibo administrators using “view as”, to return them to their own session afterwards. | Up to 30 minutes | Necessary · httpOnly |
| omnibo_ga_optout | Set only for Omnibo administrators, to keep their own use of the app and this website out of Google Analytics. | Up to 400 days, renewed on each visit | Necessary |
3. Analytics cookies (only if you accept)
This website and the app use Google Analytics 4 to see how they are used. The Google Analytics script is not loaded until you accept the cookie banner, so until then no analytics cookie is set and no data reaches Google. With a Global Privacy Control or Do Not Track signal, analytics never runs. If you accept, Google Analytics sets these first-party cookies; we never enable advertising or personalisation signals.
| Cookie | Purpose | Lifetime | Type |
|---|---|---|---|
| _ga | Distinguishes visitors, to count visits and usage. | 2 years (Google’s default; some browsers keep it for less) | Analytics · Google Analytics |
| _ga_<id> | Keeps the state of a visit (session) for the same counts. | 2 years (Google’s default; some browsers keep it for less) | Analytics · Google Analytics |
4. Where your choice is stored
Your answer to the cookie banner is not a cookie: it is stored in your browser’s localStorage, which never travels to our servers. This website stores it under omnibo.www.ga-consent and the app under cookie_consent, each as “granted” or “denied”. Clearing your browser’s site data removes it, and the banner asks again.
5. Other services’ pages
When you pay or manage your billing, you use Stripe Checkout and the Stripe customer portal, which run on Stripe’s own domain under Stripe’s own cookies and policies. At sign-up, sign-in and password reset, the app may show a Cloudflare Turnstile check to tell people from bots; it runs in Cloudflare’s frame under Cloudflare’s terms. Google Sign-In happens on Google’s pages.
6. How to change your choice
- On this website: select “Cookie settings” at the bottom of any page. The banner reappears, analytics stops at once, and the Google Analytics cookies are removed until you accept again.
- In the app: open Settings → General → Privacy & cookies and select “Cookie settings”. The banner reappears and you can choose again.
- You can also block or delete cookies in your browser settings. Blocking the necessary cookies above will stop you from signing in.
7. Changes to this policy
When we add or change a cookie we update this list and the “Last updated” date above.
8. Contact
Questions about this document? Email info@omnibo.ai.