OpenPlex Cookie Policy
Version 1.0, effective 7 November 2026
Published at: https://openplex.io/cookies
This Cookie Policy explains how Odren Ltd (company number 15944303, 7 Manchester Square, London, W1U 3PQ, United Kingdom) uses cookies and similar technologies on the OpenPlex website at https://openplex.io (the "Website") and in the OpenPlex application at https://app.openplex.io (the "Application"). It supplements the OpenPlex Privacy Policy.
1. What cookies are
Cookies are small text files stored on your device by your browser. Similar technologies include local storage and session storage in your browser. In this Policy, "cookies" covers all of them.
Cookies can be:
- strictly necessary, when they are essential to provide a service you have requested, such as signing in; these do not require consent;
- non-essential, such as analytics, personalisation or advertising cookies; these are used only with your prior consent.
2. Our approach
OpenPlex uses only strictly necessary cookies. We do not use advertising cookies, cross-site tracking or social media pixels, and we do not sell information collected through cookies.
Because we use only strictly necessary cookies, no consent banner is displayed. The Website displays an informational bar on your first visit, with a link to this Policy and a “Got it” button. This button acknowledges the notice; it does not give consent to non-essential cookies. If we ever introduce non-essential cookies, we will update this Policy and ask for your consent before setting them, with an equally easy way to refuse.
3. Cookies used in the Application
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| sb-[project-ref]-auth-token (may be split into .0, .1) | OpenPlex, via Supabase Auth | Keeps you signed in and identifies your authenticated session on each request | Strictly necessary, first party | No configured maximum session lifetime; the session is refreshed automatically while you use the Application, until you sign out or the session is revoked. |
| sb-[project-ref]-auth-token-code-verifier | OpenPlex, via Supabase Auth | Protects the Google or Apple sign-in flow against interception (PKCE) | Strictly necessary, first party | Removed once sign-in completes |
The Application may also use your browser's local storage to keep interface state, such as the open navigation section. This information stays on your device and is not used for tracking.
4. Cookies used on the Website
The Website does not set analytics or advertising cookies. Its hosting infrastructure also sets cookies. The following inventory includes cookies and browser storage observed during visits to the published public pages on 7 November 2026, together with the informational notice preference introduced by this Policy. This check does not establish the complete inventory for every browser, location or security challenge.
Our hosting provider may set a technical cookie (for example __dpl) that contains only an identifier of the current website version and is used to route your requests consistently to that version during updates. It does not contain personal information, is not used for tracking and is strictly necessary for the delivery of the website.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| __cf_bm | Cloudflare | Bot detection and protection against automated abuse | Technical security cookie, classified as strictly necessary by Cloudflare | Approximately 30 minutes observed; managed by Cloudflare |
| __dpl | Website hosting infrastructure | Contains only the current website version identifier and routes requests consistently to that version during updates; no personal information or tracking | Strictly necessary technical delivery cookie | Approximately 24 hours observed, renewed on subsequent page responses |
| tsr-scroll-restoration-v1_3 (session storage) | OpenPlex, via TanStack Router | Restores page scroll position during navigation | First-party navigation state; not used for tracking | Browser tab session, until cleared or the tab is closed |
| openplex-cookie-notice (local storage) | OpenPlex | Remembers that you dismissed the informational cookie notice, including its version | First-party notice preference; not used for tracking | Until browser storage is cleared; the notice appears again when its version changes |
For details of Cloudflare's security cookies, see Cloudflare's cookie documentation. Cookie expiry periods are not hosting-log retention periods.
5. Third-party services
Google and Apple sign-in. If you choose to sign in with Google or Apple, you are redirected to their pages, where they set their own cookies under their own policies: Google Privacy Policy and the Apple Privacy Policy. OpenPlex does not control those cookies.
Stripe. When a Customer purchases or manages a paid subscription, payment pages are provided by Stripe, which uses cookies on its own domains for fraud prevention and payment security. See the Stripe Cookie Policy.
6. Managing cookies
You can block or delete cookies through your browser settings. If you block strictly necessary cookies, you will not be able to sign in to the Application. Signing out removes the authentication cookies from your browser.
Guidance for common browsers: Chrome, Safari, Firefox, Edge.
7. Legal framework
We use cookies in accordance with the UK Privacy and Electronic Communications Regulations, Article 5(3) of the EU ePrivacy Directive as implemented in EU member states, and Article 45c of the Swiss Telecommunications Act. Strictly necessary cookies are exempt from consent under these rules.
8. Changes and contact
We will publish updates on this page with a new version number and effective date.
Questions: privacy@openplex.io.
Odren Ltd, 7 Manchester Square, London, W1U 3PQ, United Kingdom, company number 15944303 (England and Wales).