Cookie Policy
Effective: [INSERT DATE]
OffCoder uses minimal cookies. We don't track you for ads. The Android app doesn't use cookies at all (it uses encrypted on-device storage). This policy applies tooffcoder.comandadmin.offcoder.com.
What cookies are
Cookies are small text files a website stores in your browser. They let us recognize your browser between requests and remember preferences. Some are required for the site to work; others are optional.
What we use
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
offcoder_session | Keeps you signed in to admin.offcoder.com | Session | Strictly necessary |
offcoder_csrf | CSRF protection on form submissions | Session | Strictly necessary |
offcoder_theme | Remembers your preferred theme | 1 year | Preference |
cf_clearance | Cloudflare bot-protection challenge result | 30 minutes | Strictly necessary |
__Host-stripe.csrf | Stripe's CSRF token (only on payment pages) | Session | Strictly necessary |
ph_* | PostHog product analytics (anonymous user ID, session ID) | 1 year | Analytics (opt-in only) |
Third-party cookies
- Stripe sets cookies on its checkout pages. We never see your card data; Stripe's cookie settings govern those cookies.
- Cloudflare sets edge cookies for DDoS protection and rate limiting.
- PostHog sets cookies only if you've consented to analytics.
- Google Workspace may set cookies if you click a Workspace-hosted email link.
We do not use Google Analytics, Facebook Pixel, or any advertising-tech cookies. If we add any in the future, we'll update this policy and ask for explicit consent first.
Managing cookies
Most browsers let you block cookies entirely. Doing so will break sign-in to admin.offcoder.com and Stripe checkout but won't affect the Android app.
For PostHog analytics specifically: visit Privacy Settings (when added) or email privacy@offcoder.com to opt out.
Do Not Track
We respect the DNT header. If your browser sends DNT, we suppress all analytics cookies, including PostHog.
Changes
If we change cookie usage materially, we'll re-prompt for consent (where required) and update this page.