Cookies & Tracking

Strictly necessary: signed session cookie, CSRF token, load-balancing — required for sign-in and security. No consent needed.

Preferences: guest cookie choice stored on-device (`omfix-consent`); account marketing/tracking choices stored against your account.

Nonessential tools: none currently loaded — no analytics, advertising, or session-replay scripts; system fonts only; no third-party embeds. Any future tool requires separate opt-in, is off until consent, and withdrawal stops future tracking. A banner alone does not make every tool lawful.

Change your choice anytime via the Cookie settings button in the footer. External requests inventory: backend email provider (Resend/SMTP, transactional only) and object storage (S3-compatible) — no browser tracking endpoints.