Cookie Policy
Version 2.1 · Effective: September 11, 2026
1. What are cookies?
Cookies are small text files stored in your browser. We use them to keep you logged in, remember language and theme preferences, and protect against abuse — not to measure traffic: our analytics is cookieless (section 4).
- Strictly necessary — required for the site to work (e.g. session login). No consent needed.
- Functional — preferences such as theme or country picker. Low impact.
- Analytics — consent required in the EEA/UK/CH. We set none: our traffic measurement uses no cookies at all (section 4).
2. Cookies we set (first-party)
| Name | Category | Purpose | Duration |
|---|---|---|---|
| otiux_session | Strictly necessary | Keeps you logged in. Without it, authentication does not work. | 30 days (rolling) |
| otiux_stay_global | Functional | Keeps you on the worldwide otiux.com hub instead of geo-redirect. | Session / 1 year |
First-party cookies are HttpOnly where applicable, transmitted over HTTPS, and use SameSite=Lax for CSRF protection.
3. Local storage
- otiux-theme — dark/light mode preference (localStorage).
- otiux_recent_search_cities — the cities you last searched, so we can suggest them next time. They stay in your browser; they never reach us (localStorage).
- otiux-install-dismissed-v1 — remembers that you dismissed the app-install prompt (localStorage).
- otiux-minibar-cart-v1 — your minibar basket while you fill it in (localStorage).
- Service worker cache (PWA) — images only, for speed; no personal data.
You can clear site data anytime in your browser settings.
4. Analytics
We use two complementary, aggregate-oriented sources, and neither uses cookies:
- Otiux first-party measurement — we count page views on our own servers, with no tracking cookie and no persistent identifier. Per view we keep the page path (never query parameters), approximate country and city, device class (mobile / tablet / desktop), traffic source, and a SHA-256 hash of IP + browser + the day's date. That hash rotates daily, so it only counts a visitor once per day — it cannot re-identify you or follow you across days. The data stays in our own database; it goes to no one.
- Cloudflare Web Analytics — cookieless, no individual device tracking (visits, popular pages, approximate country).
We do not use Google Analytics, Google Ads, Meta Pixel, or other advertising trackers on Otiux.
5. Third-party cookies
When you buy credits, Stripe checkout may set cookies on stripe.com under Stripe's policy: stripe.com/cookie-settings.
Cloudflare may set security cookies (e.g. bot protection) as strictly necessary for site operation.
6. Managing cookies
You can:
- Clear cookies and localStorage in your browser — this logs you out and resets preferences.
- Block third-party cookies in browser settings (may affect Stripe checkout).
Popular browsers:
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Settings → Privacy (Mac) or Safari → Advanced → Website Data (iOS)
- Edge: Settings → Cookies and site permissions
Blocking otiux_session prevents login.
7. Changes
If we add non-essential cookies, we will update this page and, where required, ask for consent before setting them.
8. Contact
Questions: privacy@otiux.ro. See also our Privacy Policy.