Cookie Policy
This policy explains the cookies and similar technologies (such as your browser's local storage) used on Ovenbird's website and app, as required by article 22.2 of Spain's Law 34/2002 (LSSI-CE) and the EU ePrivacy Directive, and in line with the Spanish data protection authority's (AEPD) guide on cookies.
1. What we use, in short
- Only our own. Every cookie and storage item is set by [to be completed: company legal name] on our own domain. There are no third-party cookies.
- No analytics, no advertising. We do not track you across sites, build profiles or measure audiences with cookies. Our fonts are served from our own servers, so loading a page sends nothing to Google or other font services.
- Strictly necessary items need no consent (LSSI-CE art. 22.2): they keep you signed in, protect sign-in and remember your choice.
- Preferences are optional and stay off until you turn them on.
2. The full list
| Name | Type | Purpose | Category | Duration |
|---|---|---|---|---|
ob_session | Cookie (HTTP-only) | Keeps you signed in to the app. | Strictly necessary | 30 days |
ob_sso | Cookie (HTTP-only) | Protects sign-in with Google or Microsoft against forgery while you sign in. | Strictly necessary | 10 minutes |
ob_oauth | Cookie (HTTP-only) | Protects connecting your Atlassian site while an admin connects it. | Strictly necessary | 10 minutes |
ob_ops | Cookie (HTTP-only) | Keeps Ovenbird staff signed in to the operator console. Never set for customers. | Strictly necessary | 12 hours |
ob_consent | Cookie | Remembers your cookie choice, so we don't ask on every page. | Strictly necessary | 12 months |
nu_session | Cookie (HTTP-only) | The session cookie's former name; replaced by ob_session on your next visit. | Strictly necessary | Until replaced |
ob_lang | Browser storage (local) | Remembers the language you chose. | Strictly necessary (requested by you) | Until you change it or clear your browser data |
ob_last_chat | Browser storage (local) | Reopens the last conversation you had open. | Preferences (optional) | Until you clear it or turn Preferences off |
ob_me | Browser storage (session) | Shows the app's top bar instantly when you move between pages. | Preferences (optional) | Until you close the tab, or turn Preferences off |
Two further items, ob_token and ob_ops_token, exist only when the app runs on a developer's own computer (localhost) and are never set on our website.
3. Your choice, and how to change it
On your first visit we ask whether you accept optional cookies, with equally prominent options to accept all, reject optional ones, or choose. Nothing optional is used before you choose, and browsing or scrolling is not consent. You can change or withdraw your choice at any time with the Cookie settings link at the bottom of every page and in the app's account menu; withdrawing deletes the optional items straight away. We ask again after 12 months, or sooner if this policy changes. If your browser sends a Global Privacy Control signal, optional items start switched off.
You can also block or delete cookies in your browser's settings. Blocking strictly necessary cookies stops sign-in from working.
4. Records of your choice
To be able to show what you chose (GDPR art. 7(1)), we keep a record with a random identifier stored in your ob_consent cookie, your choices, the policy version and the time. It contains no IP address and is not linked to your account. We keep it for 3 years.
5. Sign-in with Google or Microsoft
If you choose to sign in with Google or Microsoft, you are taken to their sites, which set their own cookies under their own policies. We do not control or read those cookies.
6. Changes and contact
When this policy changes we update its version above and ask for your choice again. Questions: [to be completed: privacy contact email].