Sign-in and security cookies
| Name | Purpose | Lifetime |
|---|---|---|
| __Host-onlyme_session | Keep you signed in using an opaque session token. | 7 days maximum; cleared on sign-out. |
| onlyme_oauth_state onlyme_oauth_verifier onlyme_oauth_next | Protect and complete Google sign-in, only when you choose that flow. | 10 minutes maximum; cleared on callback. |
These are first-party sign-in cookies. They are not used for advertising. Disabling them can prevent sign-in. Cookie lifetime is separate from the retention of server records.
Preferences and storage on your device
- Appearance: the appearance setting you save is kept as
onlyme-appearancein local storage until you change it or clear site data. - Private workspace settings: preferences and local settings use keys starting with
onlyme:private:v1:, scoped to your account and workspace. This application’s sign-out flow clears that scope. They are not a backup of the server’s workspace data. - Sign-in form:
onlyme-login-emailin session storage keeps the email you entered across a failed sign-in attempt. It lasts for the tab’s session and can be removed by clearing site data. - Sign-out coordination:
onlyme:private:logoutis a local storage signal so other open tabs for the same account clear their private state. - Website files: your browser may cache first-party images and models to load the site efficiently. Versioned asset caches may remain until replaced, evicted by the browser or cleared with site data. Loading-screen readiness is kept in memory for the current document, with no durable visit marker created.
Optional tracking
No analytics, advertising or session replay category is enabled in this version. There is therefore no “accept all” tracking choice. Any future nonessential storage or tracking must stay off until the required valid consent is obtained, with an equally accessible way to refuse and withdraw it. EU guidance explains when consent is required.
Control your storage
Change appearance and preferences in Settings, or use your browser’s site-data controls to remove cookies, local storage and cached files for this origin. Clearing site data can sign you out and reset local preferences. Older versions may have left loading-screen flags beginning with onlyme-assets-preloaded; clearing site data removes those too.
Google and connected platforms use their own cookies on their sites. Those are governed by their policies and browser controls. See the privacy notice for providers and server-side data.