1. Introduction
This Cookie Policy explains how OneTap (“we”, “us”, or “our”) uses cookies and similar technologies on onetap-card.com (the marketing website) and app.onetap-card.com (the dashboard app), together the “Services”.
Read this Policy together with our Privacy Policy at app.onetap-card.com/privacy. Public digital business cards hosted on a separate card host are out of scope: we do not load advertising pixels on those pages.
This document describes current product behavior. Counsel should still review it before it is treated as launch-final legal copy.
2. What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site function, remember preferences, and measure how you interact with it.
We also use similar technologies such as localStorage, sessionStorage, and pixels, which work in a similar way. This Policy covers those technologies as well.
3. Types of cookies we use
Essential / functional
These are needed for the Services to work: secure sign-in, remembering language, and remembering a marketing-site cookie choice. They do not require consent. Blocking them may prevent sign-in or keep the cookie banner returning on every visit.
Product analytics (dashboard app)
After you create an account and accept our Terms and Privacy Policy, the dashboard app uses PostHog and first-party usage events to operate, secure, and improve the product. The app does not show a separate cookie banner for this processing.
Marketing
We use the Meta Pixel (including cookies such as _fbp and _fbc) to measure ads on Facebook and Instagram.
- On the marketing website, the pixel loads only after you Accept marketing cookies. Reject keeps the site usable without Facebook's script.
- On the dashboard app, the pixel loads only after registration (Terms and Privacy accepted), so we can measure CompleteRegistration and later conversions. Anonymous visits to
/registeror/createdo not load a marketing PageView from the app.
4. Cookies we use
Durations below match how the product actually stores data today. We do not currently expire marketing consent or UTM storage on a fixed timer.
| Cookie / technology | Surface | Type | Purpose | Duration |
|---|---|---|---|---|
| Supabase auth cookies | App | Essential | Keep you signed in and maintain a secure session | Session or persisted login |
onetap-locale | App | Essential / functional | Remember your product-chrome language | Until you change language or clear site data |
onetap-consent-marketing (localStorage) | Marketing | Essential | Remember Accept or Reject for marketing cookies | Until you change the choice or clear site data |
Meta Pixel (_fbp, _fbc) | Marketing after Accept; app after registration | Marketing | Ad measurement and conversion attribution on Facebook / Instagram | Meta defaults (typically up to about 90 days) |
UTM / fbclid (localStorage) | App | Marketing attribution | Remember which campaign or ad led to signup | Until cleared; no fixed TTL in the product today |
| PostHog persistence | App | Product analytics | Dashboard product analytics after registration | Vendor persistence |
The dashboard app also uses first-party localStorage for onboarding drafts, editor working state, and similar feature UX. Those keys are not marketing cookies.
5. Your choices
Marketing website
The first time you visit the marketing site with ads measurement enabled, a banner lets you Accept or Reject marketing cookies. You can change that choice later through Cookie settings in the marketing footer. That control re-opens Accept / Reject; it is not a category preferences panel.
Dashboard app
The app does not show a cookie banner. Product analytics and post-registration ads measurement are disclosed in the Privacy Policy and accepted with the Terms and Privacy Policy at registration. To object where applicable law allows, email privacy@onetap-card.com.
Browser settings
Most browsers let you block or delete cookies. Blocking essential cookies may prevent sign-in or other core features. Clearing site data for onetap-card.com and app.onetap-card.com removes stored consent and attribution values.
6. Third-party cookies
Some cookies and similar technologies are set or read by third parties, including:
- Meta (Facebook / Instagram) — advertising measurement and conversion tracking via the Meta Pixel, subject to Meta's own privacy policy.
- PostHog — product analytics on the dashboard app, subject to PostHog's own privacy policy.
We recommend reviewing those vendors' policies for how they handle data collected through their cookies and SDKs.
7. Changes to this policy
We may update this Cookie Policy as the Services or legal requirements change. We will post the updated version on this page and revise the “Last updated” date.
8. Contact us
Privacy questions: privacy@onetap-card.com
Website: https://onetap-card.com
App (Dashboard): https://app.onetap-card.com