Cookie Policy
Last updated: May 2026.
TL;DR
We do not set tracking cookies. We do not set cookies on the redirect domain when someone clicks a smart link. The only cookies / browser storage we use are strictly necessary for the dashboard to work (authentication, preferences). No consent banner is required because we don't process personal data through cookies for marketing or analytics purposes.
What we store in your browser
When you sign in to your dashboard at oh-links.com, we store the following in your browser:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
| oh_access_token | localStorage | Short-lived JWT for API authentication | ~15 minutes |
| oh_refresh_token | HTTP-only cookie | Refreshes the access token without re-login | 7 days (rolling) |
| oh_theme | localStorage | Your preferred color scheme (dark / light) | Until you clear it |
All of these are strictly necessary (under ePrivacy) — without them, the dashboard can't function. None of them is shared with third parties.
Smart link redirects
When someone clicks a smart link (oh-links.com/abc123 or your custom domain), we set zero cookies on their browser. We don't fingerprint them, we don't load any third-party tracker. The only thing we do is record an anonymous click event for your analytics — see our Privacy Policy for what's in it (spoiler: no IP, no cookie, no fingerprint).
Third-party cookies on the marketing site
The marketing pages (homepage, pricing, docs, this page) do not embed any third-party scripts that set cookies. If we add any in the future (e.g. Stripe checkout iframe), we'll update this page and surface a consent prompt where required by law.
Managing your cookies
Modern browsers let you delete cookies and clear localStorage from their settings:
Note: clearing the dashboard cookies will sign you out.
Contact
Questions about cookies? Email privacy@oh-links.com.