Legal

Cookie Policy

Last updated: December 2026

This policy explains exactly what Omni Field stores on your device, why, and how to change your mind. It sits alongside our Privacy Policy and POPIA Compliance statement.

1. How we ask

The first time you visit, a banner asks you to choose. Until you choose, nothing optional runs. Analytics and advertising tags are loaded in a denied state using Google Consent Mode, which means they cannot write a cookie or send identifying data until you say yes.

Rejecting is a single click, in the same place and with the same weight as accepting. We do not treat silence, scrolling or continued browsing as agreement.

2. The three categories

Strictly necessary (always on)

These are what makes the site work. They are all first party, none are shared with anyone, and none are used to build a profile of you. There is no toggle because switching them off would break the site.

Name Type Purpose Kept for
ofp_consent Cookie Stores the choices you make, so you are not asked again 6 months
theme, sidebarTheme Local storage Remembers light or dark mode and applies it before the page paints Until you clear browser storage
pricing_currency Session storage Keeps the currency you picked on the pricing page Until you close the tab
ofp_chat_session Session storage Keeps your website chat conversation as you move between pages Until you close the tab
staleChunkReload Local storage One shot guard that stops a reload loop after we ship a new version Cleared on next load
sb-*-auth-token Local storage Your signed in session. Only set once you log in Until you sign out
sidebar:state Cookie Remembers whether the app sidebar is collapsed. Only set inside the app 7 days
Query cache IndexedDB Caches data you already loaded so the app works offline 24 hours
App shell Service worker cache Lets the app open without a connection Until the next release
Error reports No device storage Sends a report when something crashes, so we can fix it Held by Sentry under our retention settings

Error reporting is included here because it protects the integrity and security of the service rather than measuring you. Nothing is written to your device, all text is masked and all images are blocked before anything leaves your browser, and a report is only sent when something actually goes wrong.

Analytics (opt in)

Aggregate measurement, so we can see which pages work, where people give up, and whether a change helped. Turning this off changes nothing you can see on the site.

Name Type Set by Purpose Kept for
_ga, _ga_* Cookie Google Analytics 4 Counts visits and pages in aggregate Up to 2 years
Session replay No device storage Sentry A masked playback of a sample of sessions, so we can reproduce interface problems Held by Sentry under our retention settings

Advertising (opt in)

Used only to tell which advert brought someone here, and to avoid showing you the same advert over and over. We do not sell your data, and we do not host third party advertising on this site.

Name Type Set by Purpose Kept for
_gcl_au Cookie Google Ads Links a signup back to the advert click that produced it 90 days
Conversion and remarketing Cookie Google Ads Measures advert performance and limits repeat impressions Up to 540 days
ofp_attr Cookie Omni Field (first party) Remembers which advert or link first brought you here, so a later signup can be credited to it. Only set once you allow advertising cookies, and removed when you withdraw 90 days

3. Changing your mind

Use the Cookie preferences link in the footer of any page. If you are signed in, the same panel is under Settings > Privacy. Withdrawal takes effect immediately: analytics and advertising storage are revoked in the same click, and session replay stops.

You can also clear cookies in your browser at any time. Doing so removes our record of your choice, so the banner will ask you again on your next visit.

4. What we record about your choice

When you make a choice we keep a receipt, so we can show that consent was given and what it covered. Each receipt holds:

  • the choice itself (which categories, and whether you accepted, rejected, saved preferences or withdrew)
  • the date and time
  • the page you were on
  • your country, where our network layer reports it
  • your browser's user agent string
  • a one way hash of your connection and browser, salted with the date

We do not store your IP address. The hash cannot be reversed to recover it, and because the salt changes daily it cannot be used to follow you from one day to the next. A receipt identifier is also stored in your own ofp_consent cookie, so you hold a copy of the same reference we do.

Receipts are kept for three years and then deleted automatically.

5. Cookies we do not use

We do not use social media tracking pixels, third party advertising networks other than Google Ads, cross site data brokers, fingerprinting, or any technique designed to identify you without storage.

6. Your rights

Cookie consent is one part of a wider set of rights under the Protection of Personal Information Act. Your rights of access, correction, deletion, objection and complaint are set out in full in our Privacy Policy, together with the contact details for our Information Officer and for the Information Regulator.

7. Changes to this policy

If we add a tool that stores something new, we add it to the tables above before it goes live, and where the change is material we ask you to choose again.