Legal
Last updated: 1 September 2026 · Cookie table audited against the source code on the same date
This page lists everything OpusDone stores in your browser. It is generated from the same list our engineers have to update when they add anything, so it cannot quietly fall out of date. The short version: we use no analytics and no advertising trackers at all.
A cookie is a small piece of text a website asks your browser to keep and send back on your next visit. Some websites also use "local storage", which works the same way but stays in your browser instead of being sent to us. We use both, and this page covers both. Nothing here is used to follow you around other websites.
Grouped by what it is for. Anything marked "strictly necessary" is the site doing the job you asked it to do — signing you in, remembering your place in a chat, checking you are not a bot — and cannot be switched off without breaking that.
Signing you in, remembering your place in a chat, and checking you are a person rather than a bot. These cannot be turned off, because without them the thing you came here to do stops working.
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
| payload-token | OpusDone | Keeps you signed in to your dashboard. Without it you would have to enter your password on every page. It is httpOnly, so no script on the page can read it. | 30 days, or until you close the browser if you did not tick "Keep me signed in" |
| od_consent | OpusDone | Stores the cookie choices you made on this banner. Ironically, we have to store something in order to remember that you said no. | 6 months |
| oauth_state, cal_oauth_state_*, calcom_oauth_state | OpusDone | A one-time random value used while you connect Google, a calendar or Cal.com. It is what lets us verify that the account you come back with is the one you left to connect, and it is what stops an attacker attaching their calendar to your account. | 10 minutes |
| Cloudflare Turnstile | Cloudflare, Inc. | Checks that the chat widget is being used by a person rather than a script. Without it the assistant can be driven by bots, which costs money and floods the business with junk conversations. | Session |
| Chat widget conversation (local storage) | OpusDone | Keeps your place in a chat with the assistant, so refreshing the page does not lose the conversation. Nothing is written until you actually open the chat — closing the widget without opening it stores nothing at all. | Until you clear it, or clear your browser data |
Remembers choices you have made, such as whether you read the site in English or Spanish. Turning this off means the site may not remember your language between visits.
| Name | Set by | What it does | How long it lasts |
|---|---|---|---|
| NEXT_LOCALE | OpusDone | Remembers whether you are reading the site in English or Spanish, so you are not switched back on every visit. | 1 year |
Would tell us which pages are read and where people get stuck. We currently use none at all — this switch is here so that if we ever add one, your answer is already on record.
We do not use any. There are no analytics or advertising trackers on this website — this section exists so you can see that, rather than having to conclude it from an absence.
Would be used to measure advertising or show you ads elsewhere. We use none, and we do not sell or share your information with advertisers.
We do not use any. There are no analytics or advertising trackers on this website — this section exists so you can see that, rather than having to conclude it from an absence.
You can change your choices whenever you like, and it takes effect immediately. Withdrawing is exactly as easy as agreeing was — one click, from any page, from the "Cookie settings" link in the footer or the button below.
Every major browser lets you see, block and delete cookies for any site, independently of anything we offer. Look for Privacy or Site settings in your browser's preferences. Blocking strictly necessary cookies will sign you out and stop the chat widget from remembering a conversation, but nothing will break permanently.
If your browser sends a Global Privacy Control signal, we treat it as an opt-out and apply it automatically — you do not need to answer the banner as well. In California, Colorado and Connecticut that signal is legally binding, and we honour it everywhere. We do not act on the older Do Not Track header, which was never given an agreed meaning; use Global Privacy Control instead.
US privacy laws work the other way round from Europe's: rather than asking permission first, they give you the right to opt out. You can do that at any time using "Your privacy choices" in the footer. We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined in the CCPA — there are no advertising trackers on this site to do it with.
Nothing beyond the strictly necessary items above is stored until you agree to it. Declining costs you nothing: the site works identically, and we will not ask again for six months unless the list on this page changes materially.
If we add anything to the table above, we ask you again rather than assuming your earlier answer covered something that did not exist at the time. Questions about this page: hello@opusdone.com.