Cookie Policy
Version 1.0 · Published 20 August 2026 · Effective 20 August 2026
This policy lists every cookie and similar technology OHMLEY uses today, in line with the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR standard of consent. If something is not listed here, we are not using it.
1. What this policy covers
“Cookies” here covers small files a website stores in your browser and similar technologies such as local storage, session storage and pixels. OHMLEY relies mainly on first-party browser local storage rather than traditional cookies. This policy sits alongside our Privacy Policy, which explains how any personal data collected through these technologies is handled.
2. Strictly necessary (always on, no consent required)
| Name | Type / party | Purpose | Duration |
|---|---|---|---|
| sb-…-auth-token | Local storage · first party (set by our authentication provider) | Keeps you signed in and refreshes your session securely. | Until you sign out or the session expires |
| ohmley.cookie-consent.v1 | Local storage · first party | Remembers the cookie choice you made so we do not ask again. | 12 months, or until you change your choice |
| Client portal / invitation tokens | In the link URL · first party | Lets an invited person or a client open the specific page shared with them. | Until the link expires |
These are required to deliver a service you have specifically asked for, so under regulation 6(4) of PECR they are exempt from consent and cannot be switched off while you use OHMLEY.
3. Preferences (consent required)
Small in-app choices — such as a remembered list filter, sort order or recently copied audit links — can be stored in your browser to save you setting them again. Nothing in this category is stored unless you allow it, and clearing it only means you set your preferences again.
4. Analytics (consent required)
None in use today. OHMLEY does not run any analytics or product measurement technology in the application. If we add one, it will be listed here with the provider, purpose and duration, and it will only run after you opt in.
5. Marketing (consent required)
None in use today. We do not run advertising, retargeting or campaign measurement technologies, and we do not share browsing data with advertising networks.
6. Your choices
- Optional categories are off until you actively turn them on — no pre-ticked boxes and no bundled consent.
- Rejecting optional cookies is as easy as accepting them, and continuing to browse is never treated as consent.
- You can change or withdraw optional consent at any time using the Cookie settings link in the footer of every page.
- We record the choice you made, the categories, the policy version, and the date and time, so we can evidence what was agreed.
- You can also block or delete storage in your browser settings — see aboutcookies.org — though blocking strictly necessary storage will sign you out and stop the app working.
7. Changes and questions
We review this policy whenever we add or remove a technology, and always before any new optional category goes live. Questions can be sent to the address on our Legal & privacy contact page.