Cookie Policy

Last updated: April 29, 2026

How we use cookies and similar technologies to provide secure, functional services.

Disclaimer: This document is a template and not legal advice. Please consult with qualified legal counsel for advice specific to your situation.

What are cookies & similar tech

Cookies are small text files stored on your device when you visit a website. They help websites remember information about your visit, such as your login status and preferences.

Similar technologies include local storage, session storage, and web beacons. We collectively refer to these as "cookies" in this policy.

Categories used

Strictly necessary

These cookies are essential for our website to function properly and cannot be disabled. They are required for the services you have requested.

Examples of strictly necessary cookies:

  • onyt_jwt - Authentication (httpOnly, secure, 7 days)
  • csrfToken - CSRF protection for admin operations (secure, 24 hours)
  • onyt_ref - Referral attribution (30 days)

Analytics

We use Plausible Analytics, a privacy-focused, cookieless analytics tool. Plausible does not set any cookies on your device, does not collect personal data, and does not track you across sites. It is fully GDPR, CCPA, and PECR compliant without requiring consent.

Plausible Analytics (cookieless):

  • No cookies set on your device
  • No personal data collected or stored
  • No cross-site tracking
  • Aggregated usage statistics only

Operational monitoring

We use Sentry for error and performance monitoring to ensure service reliability. This is operational infrastructure monitoring, not user analytics. Data is anonymized and used only for debugging and maintaining service quality.

Sentry Performance Monitoring:

  • Collects error reports and performance metrics
  • May capture anonymized user interaction data
  • Helps us identify and fix technical issues
  • Data processed according to Sentry's privacy policy

Managing cookies

Browser controls

You can configure your browser to block or delete cookies at any time. Note that disabling strictly necessary cookies may prevent parts of our website from functioning properly, including account login and cashback tracking.

  • Browser Settings: You can configure your browser to block or delete cookies
  • Do Not Track: We respect browser Do Not Track settings where technically feasible

List/describe the cookies/headers we reasonably use

NamePurposeDurationType
onyt_jwtAuthentication (httpOnly, secure)7 daysStrictly Necessary
csrfTokenCross-site request forgery protection for admin operations24 hoursStrictly Necessary
onyt_refReferral attribution — records which board page referred you to onyt30 daysFunctional (Legitimate Interest)

Changes & Contact

Policy Updates

We may update this Cookie Policy from time to time to reflect changes in our practices, technology, or legal requirements. Material changes will be communicated through our website and by updating the effective date.

Questions or Concerns

If you have questions about this Cookie Policy or our use of cookies and similar technologies, please contact us at: contact@onyt.net

ONYT OÜ
Your Address, City, Country

Learn More

For more detailed information about our data practices, please see our Privacy Policy.