Cookie Notice
Last updated: 14 October 2026
OWNLYTIX uses only cookies and storage that are strictly needed for the service to work, so we don't show a cookie banner. Our usage statistics run in memory only: they store nothing on your device, create no visitor profile and don't identify you. If we ever add anything that isn't strictly needed, we will ask for your consent first and update this notice.
| Cookie or storage | Purpose | How long |
|---|---|---|
| Session cookies (HttpOnly, Secure) | Keep you signed in to app.ownlytix.com | Up to 30 days without use |
| Sign-in security cookie | Protect the Google sign-in step and remember a valid launch, referral or invite code | Up to 10 minutes |
| Browser storage for settings | Remember small choices such as light or dark mode | Until you clear it |
Our website and app statistics are collected without cookies, without visitor profiles and without session recordings, and never on report links. Report viewers get no tracking cookies; we only count when a report link is opened. If we ever add cookies that aren't essential, we will ask for your consent first and update this notice.
Before publishing, fill in: publishing dates, provider regions (from each provider's dashboard), and the chosen card payment provider's name.
Engineering rules that keep these pages true (agents must follow them; changing any of them means updating these pages first):
- PostHog runs with in-memory persistence only, no cookies, no local storage, no person profiles, no session recording, and never on report links (if this ever changes, a consent banner is required first).
- Retention jobs delete: internet-address codes after 90 days; anti-repeat codes after 2 years; admin audit logs after 2 years; waitlist entries 12 months after the beta ends; payment webhook payloads after 90 days; raw CSV uploads after 30 days; purchase and refund records after 6 years.
- Account deletion finishes within 24 hours; backups roll off within 7 days.
- Each provider's standard data processing agreement is accepted in its dashboard when the account is created (Supabase, Vercel, Twilio, Resend, Sentry, PostHog, the payment provider), and the founder notes the date in the password manager.
- Every JazzCash/Easypaisa sale gets a numbered receipt email (amount, date, transaction ID) kept with the purchase record.