OneTrueTagOneTrueTag Cookie Policy
Version: [[VERSION]] · Effective date: [[EFFECTIVE_DATE]] · Last updated: 2026-10-22 (draft)
This policy lists every cookie and browser-storage item that OneTrueTag sets. It covers the brand panel (where sellers work), the customer panel (the pages people reach by scanning a code, including a brand's custom domain, the tracking pages and the optional customer account) and our website, where you are reading this.
1. Summary
1.1 The panels and the website set no advertising, analytics or cross-site tracking cookies, and no third-party cookies of their own.
1.2 Almost every cookie is strictly necessary: it is needed for a service you asked for (signing in, checking a code, following a request you sent) and is exempt from consent under Art. 5(3) of the ePrivacy Directive and the equivalent national and UK rules (PECR). Two cookies only remember a choice you made (language and theme); they are set only when you make that choice. Two more remember the referral link that brought you to us, if you came through one (footnote ³).
1.3 Most cookies are HttpOnly (page scripts cannot read them), SameSite=Lax and Secure in production. Several are limited to the path of one code, so the browser never sends them for another product.
2. Customer panel (scan pages)
| Name | Purpose | Lifetime | Scope | Category |
|---|---|---|---|---|
ott_visitor | A random id that recognises this browser on the next scan, so the check can say "you verified this before" instead of warning about a duplicate. Only a keyed hash is stored by the server. Also used to count returning visitors in the brand's statistics | 2 years | Whole site, HttpOnly | Strictly necessary ¹ |
ott_last_scan | The product page this browser opened last, so the tracking pages can link back to it | 30 days | Whole site, HttpOnly | Strictly necessary |
ott_proof | Proof that this browser entered the right scratch-off digits for one unit, so they are not asked again | 2 years | That code's path only, HttpOnly | Strictly necessary |
ott_owner | Records that you answered "Yes, it was me" about an earlier check of one unit | 2 years | That code's path only, HttpOnly | Strictly necessary |
ott_wr | The tracking code of a warranty registered from this browser for one unit, so you can open it again | 2 years | That code's path only, HttpOnly | Strictly necessary |
ott_repair | The tracking code of a repair request sent from this browser for one unit, so "See how it's going" opens it | 2 years | That code's path only, HttpOnly | Strictly necessary |
ott_claim | A request you just sent, waiting to be saved to your customer account after you sign in | 30 minutes | /account only, HttpOnly | Strictly necessary |
ott_access | Sign-in token for the customer account | 15 minutes (renewed while signed in) | Whole site, HttpOnly | Strictly necessary |
ott_refresh | Keeps you signed in to the customer account | Up to 30 days | Whole site, HttpOnly | Strictly necessary |
ott_2fa | The open second step of a sign-in with two-factor authentication | 5 minutes | Whole site, HttpOnly | Strictly necessary |
NEXT_LOCALE | The language you chose with the language switch | 1 year | Whole site, readable by the page | Preference (set only when you choose) |
¹ ott_visitor is classified as strictly necessary because the authenticity check you request depends on it. Its secondary use for counting returning visitors in statistics should be confirmed by legal review; if that review finds consent is needed for it, the statistics use will be dropped for browsers that have not consented.
If your browser refuses cookies, the scan page still opens, but the code cannot be verified as yours and the page says so.
3. Brand panel
| Name | Purpose | Lifetime | Scope | Category |
|---|---|---|---|---|
ott_access | Sign-in token | 15 minutes (renewed while signed in) | Whole site, HttpOnly | Strictly necessary |
ott_refresh | Keeps you signed in | Up to 30 days | Whole site, HttpOnly | Strictly necessary |
ott_2fa | The open second step of a sign-in with two-factor authentication | 5 minutes | Whole site, HttpOnly | Strictly necessary |
ott_shopify_attempt, ott_amazon_attempt, ott_amazon_ads_attempt, ott_zid_attempt, ott_crm_hubspot_attempt, ott_crm_salesforce_attempt, ott_crm_gohighlevel_attempt | Security for connecting a store or CRM: ties the provider's redirect back to the browser that started the connection | About 30 minutes, removed when used | That provider's callback path only, HttpOnly | Strictly necessary |
NEXT_LOCALE | The dashboard language you chose | 1 year | Whole site, readable by the page | Preference (set only when you choose) |
ott_theme | Light or dark theme, when you choose one | 1 year | Whole site, readable by the page | Preference (set only when you choose) |
ott_rt | The referral link you arrived with, kept until you create your account so that the partner who referred you is credited. Holds a signed code and the time of the click, not who you are | 30 days | Whole site, HttpOnly | Referral ³ |
Local storage (not a cookie): ott:setup-guide:<account id> remembers which steps of the setup guide on the Overview page you hid or completed. It stays in your browser until you clear it and is never sent to our servers.
Paddle checkout. When you open checkout on the Billing page, the panel loads Paddle's checkout script from cdn.paddle.com. Paddle, as merchant of record, may set its own cookies or storage for payment and fraud prevention, under Paddle's own cookie and privacy notices. Nothing from Paddle loads before you open checkout.
4. Website
| Name | Purpose | Lifetime | Scope | Category |
|---|---|---|---|---|
pll_language | The language of the page you opened, so the website keeps showing you that language | 1 year | Whole site, readable by the page | Strictly necessary ² |
ott_consent | Your answer to the cookie banner (page statistics and marketing, each yes or no), so the banner does not ask again | 6 months | Whole site, readable by the page | Strictly necessary |
ott_ref | The referral link of a partner that you opened, so that an account created within this period is credited to that partner; the first link opened counts. Holds a signed code and the time of the click | 30 days | Whole site, readable by the page | Referral ³ |
² pll_language is set by the website's language software when you open a page, not only when you choose a language. It holds nothing but a language code. Whether it counts as strictly necessary should be confirmed by legal review; if not, it will be set only when you choose a language.
³ The website sets ott_ref only after you say yes to marketing in the cookie banner (4.1). If you say no, any ott_ref is deleted and nothing about the referral is passed to the brand panel. ott_rt is set only when you arrive at the brand panel carrying a referral: from the website after that yes, or through a partner's link that points straight at the brand panel. They hold no name, email address or network address, and no other site can read them.
4.1 The cookie banner asks about page statistics and marketing. The website loads no statistics tool today, so the statistics answer changes nothing yet. The marketing answer decides whether the referral cookie ott_ref is set when you arrive through another business's referral link: it is set only after you say yes, and deleted if you say no. If we add a statistics or marketing tool, it will load only after you say yes, and this table will list its cookies first.
4.2 People who sign in to manage the website (our own staff) also get WordPress's sign-in cookies (wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie, wp-settings-*). Visitors never do.
4.3 You can change your answer at any time with Cookie settings at the bottom of every page.
5. Third-party content
On the repair form, the pickup-point map loads map images from [[MAPTILEPROVIDER]]. This sends your IP address to that provider; it does not set cookies through our pages. Fonts are served from our own servers, on the panels and on the website. The website loads nothing from other companies' servers; links to sources open the source's own site.
6. Managing cookies
You can delete or block cookies in your browser settings. Blocking strictly necessary cookies stops the related feature from working (for example, you cannot stay signed in). Deleting ott_visitor makes your next scan look like a new visitor's.
7. Contact
[[PRIVACY_EMAIL]]. See also the privacy policy.