Draft for review. This text was prepared for approval by the operator and a qualified lawyer before the public launch. Items marked To be confirmed are still open.
Cookies and local storage
Last updated: 12 October 2026
Opes uses only what is strictly necessary to run the service and to remember your display choices. We use no advertising or tracking cookies. We do use two cookie-less measurement tools (Vercel Web Analytics and Vercel Speed Insights, described below). This page tells you what is stored on your device.
Cookies
| Name | Purpose | Duration |
|---|---|---|
Supabase session cookies (names begin sb-) | Keep you signed in and hold the authentication state, including the second-factor level. If you leave "Remember me" off, they last only until you close the browser. | Session, or up to the limit you chose; the service signs you out after 15 minutes idle and 12 hours in all |
ow_last_seen, ow_session_start | Server-side clocks that enforce the 15-minute inactivity and 12-hour limits, for your protection. | Until you close the browser; removed at sign-out |
opes-ui-tier | Remembers the dashboard detail level you chose (Free, Plus, Pro, Expert, Family Office) so the page renders correctly on first load. Not sensitive. | 1 year |
| Cloudflare Turnstile | The bot check on sign-in, sign-up and password reset may set a short-lived token or cookie to tell people from automated programs. Provided by Cloudflare. | Session to a few minutes |
Local storage on your device
These stay in your browser and are not sent to us. You can clear them in your browser settings.
| Key | Purpose |
|---|---|
opes_locale | Your language. |
opes_privacy_mode | Whether figures are masked. |
opes-ui-tier, opes-table-density, comfort display mode, theme | Your display preferences. |
opes-last-activity | Shares the last-activity time between tabs for the inactivity sign-out. |
opes-banking-order, opes-stmt-* | Order of your banks on screen and your last statement-import choices. |
Audience and speed measurement (Vercel Web Analytics and Speed Insights)
We measure how many people visit which pages, from which country and with which kind of browser and device, so we can fix and improve the service. Vercel Web Analytics does not set cookies and does not write anything to your browser storage. Each visit sends Vercel the page address, the referring page, the country, and the browser, operating system and device type. A visitor is told apart from another only by a short-lived identifier derived on Vercel's servers, which is not kept as a permanent profile and is not used to follow you across other websites. The page address can include an identifier of an item in your own account (for example an asset); it contains no amounts or names. We do not use this data for advertising and do not combine it with your account. Vercel Speed Insights works the same way and measures how fast pages load and respond (page address, loading and responsiveness timings, country, browser and device type), also without cookies, to find slow screens.To be confirmed: Operator and lawyer to confirm this description against Vercel's current documentation for both tools, and decide whether the legitimate-interest basis is enough or a consent choice is wanted for EU visitors.
Why there is no consent banner
Under the EU ePrivacy rules, storage that is strictly necessary to provide a service you asked for, or to remember a setting you chose, does not need prior consent. Everything stored on your device (above) is of that kind, and audience measurement does not store anything on your device. If we ever add a tracker that stores or reads information on your device for another purpose, we will first ask for your consent through a banner and update this page.
More on how we handle personal data: privacy policy.