Cookies & preferences

Updated October 11, 2026

Essential storage

The __Host-onecontour cookie (onecontour_session in local development) authenticates a verified customer or team account for up to seven days. It is Secure, HttpOnly and SameSite Strict online. Browser local storage onecontour-consent-v2 remembers your analytics and advertising choices for up to 180 days. If you accept analytics, onecontour-funnel-v1 keeps a random visitor ID and a broad traffic source for up to 30 days. Session storage onecontour-project remembers your project during the current tab session. These serve sign-in, preference and requested workflow functions.

Optional analytics

With analytics consent, first-party page, product, quote, delivery-estimate outcome and checkout-stage events are counted using a random visitor ID, page path and broad source such as Google, ChatGPT, Claude or direct. We do not send a full URL, design text, ZIP or email in these page events. The broad source can be linked to an account creation, project inquiry or order to count verified signups and paid orders by source. These optional links and anonymous funnel events are kept for up to 30 days. Signed-in account activity can also be linked to your email and is kept for up to 90 days. We cannot see an AI question unless you separately choose to share it on the inquiry or account-creation form. That answer is not supplied by ChatGPT, does not require analytics consent and is deleted after 90 days.

Optional advertising pixels

Only if you choose Analytics and ads, Meta and TikTok pixel code may load when a pixel ID is configured. They can receive page views, product views and checkout starts and may set their own cookies. No purchase event is sent from the browser. Their own policies govern data they receive. Global Privacy Control and Do Not Track disable both optional choices.

Withdrawal

Rejecting after accepting stops optional first-party events, removes the current browser visitor ID and requests deletion of that ID’s funnel events and source links. While signed in and connected, it also deletes prior optional account events. If the deletion request cannot reach us, anonymous events expire within 30 days; signed-in events expire within 90 days. Previously loaded advertising scripts are unloaded by refreshing the page after withdrawal. Essential account, project and payment records are unaffected.