Cookie Policy
Last updated: 5 August 2026 · Version 1.0
There is no cookie banner, and that is deliberate
Omnidara sets two cookies. Both are strictly necessary to provide a service you have asked for, which is the exact exemption in Article 5(3) of the ePrivacy Directive - so no consent is required and no banner is shown. We would rather say that plainly than put a pointless dialogue in front of you and ask permission for something we are not doing.
We set no analytics, advertising, marketing, social or cross-site tracking cookies, and no third-party cookies of any kind.
Every cookie we set
| Name | Purpose | Type | Expires |
|---|---|---|---|
| JSESSIONID | Keeps you signed in as you move between pages, and carries the anti-CSRF token that protects every form you submit. Without it, signing in would not be possible. | Strictly necessary | When you close your browser, or when you sign out |
| remember-me | Set only if you tick "Remember me" at sign-in. Lets you return without signing in again. Signed with a server-side secret so it cannot be forged. | Strictly necessary (set at your request) | 14 days |
Signing out deletes both. You can also clear them from your browser's settings at any time; the only consequence is that you will be asked to sign in again.
Local storage and similar technologies
We do not use localStorage, sessionStorage, IndexedDB, fingerprinting or tracking pixels.
Third-party requests
Two things load from outside our own servers. Neither sets a cookie, but both mean a request from your browser reaches another company, so they are disclosed here:
- Google Fonts (fonts.googleapis.com, fonts.gstatic.com) - the typefaces used across the site. Loading them transmits your IP address to Google. We intend to self-host these, which removes the transfer entirely.
- Stripe - only when you start a checkout or open the billing portal, at which point you are redirected to Stripe's own pages. Any cookies set there are Stripe's, on Stripe's domain, under Stripe's privacy policy. Nothing from Stripe runs on our pages.
All application JavaScript is served from our own domain. Our content security policy allows scripts from no other origin at all.
If this changes
If we ever add a cookie that is not strictly necessary, we will ask for your consent before setting it, and update this page first. Questions: [PRIVACY CONTACT EMAIL].