Cookie Policy
Last updated October 19, 2026
Cookies are small values a service saves in your browser. We also use local storage and session storage. This policy covers those technologies and the optional services controlled by our privacy preferences. See our Privacy Policy for personal information, recipients and your rights.
1. Your choice comes first
Essential features work without optional permission. Analytics, browser diagnostics and live chat stay off until you enable their category. You can reject all optional services, accept them, or select individual categories. Continuing to browse does not count as consent.
Your choice applies to this browser and is valid for 180 days. We ask again when it expires or the consent version changes. If browser storage is blocked, we can only remember your choice for the current page. A different browser or cleared storage may require a new choice.
2. Essential storage
- __Host-onestow_session: our secure sign-in cookie. A browser-session cookie is used for a short session, with a 12-hour server-side limit. If you choose to be remembered, the session lasts up to 30 days. It is not set merely for browsing.
- onestow_privacy_v1: local storage recording your chosen categories, consent version and time. Its validity is 180 days; expired choices no longer enable services.
- onestow_buybar_closed: session storage remembering that you closed a purchase prompt, for the tab session.
- Payment and security services: Stripe may use its own necessary technologies when you open its checkout. Provider-controlled checkout storage is outside this website's optional-service switch.
3. Optional analytics and diagnostics
When enabled, PostHog measures selected interactions and visits and helps link a purchase to a visit. We use first-party identifiers; this integration does not enable advertising or session replay. Browser Sentry diagnostics help investigate errors and performance. Essential server-side security and error handling are separate.
- PostHog keys, commonly beginning ph_: local storage for analytics identifiers and preferences. These can persist until cleared; the service is permitted to use them only while your choice remains valid. Rejecting analytics clears matching storage available to our website.
- onestow_visit: our local attribution record for a landing, referral or campaign, used for up to 30 days. Expired values are ignored; rejection clears the record.
Purchase analytics may be sent from our server using the analytics identifier supplied when checkout began. Withdrawing later stops future browser collection, but does not undo a purchase event already requested or information already processed. Contact us for an applicable deletion request.
4. Optional live chat
Crisp loads only when you allow live chat. Its service uses cookies and storage with names commonly beginning crisp-client/ to maintain a conversation and connection. Crisp describes its default session-cookie lifetime as six months; provider settings and browser limits can change the actual lifetime. Our 180-day permission applies independently.
Selecting the chat icon without permission opens the preference dialog. You can instead use our contact form or email without enabling chat. Do not send sensitive documents or payment details in a chat.
5. Changing or withdrawing permission
Use Cookie settings in the footer or on this page. Withdrawal stops new optional use, clears matching first-party storage accessible to our website and reloads the page to unload running services. Withdrawing chat permission may disconnect the current conversation. Your sign-in session is not removed.
We cannot erase provider-domain or inaccessible cookies from this website. Use your browser's storage controls to remove those if needed. Deleting a browser identifier does not itself delete messages, payment records or information already held by a provider.
6. Browser privacy controls
When a supported Global Privacy Control signal is enabled, optional analytics remains disabled even if you previously allowed it. We do not sell data or use cross-context behavioural advertising. Your live-chat preference remains a separate choice. Browser controls may also block or delete storage, but disabling necessary cookies can prevent sign-in or payment functions.
7. Provider information and updates
See PostHog's privacy notice, Crisp's cookie policy, Sentry's privacy notice and Stripe's privacy notice for provider practices. Storage names may include project or session identifiers, so exact suffixes vary.
We will update this policy when the technologies or purposes change. For questions, email support@onestow.com.