Cookie and Local Storage Notice

Document version V0.4Legal set V0.4Effective 2026-09-12business@oceanalt.com

This is the bilingual V0.4 publication copy of the OceanAlt legal documents. OceanAlt is at an early stage and has not yet designated a single formal legal operating entity; these documents use a transitional operating arrangement and do not fabricate any legal-entity details.

Core reminder: no risk signal found ≠ safe. Pre-payment screening does not replace your own authorisation, transaction monitoring, legal judgement or necessary human review.

OceanAlt keeps non-essential cookies to a minimum. The list below reflects what production actually sets; nothing is listed for the sake of a complete template.

1. Cookies actually in use

oa_admin · OceanAlt · purpose: admin login session · essential · 30 days · httpOnly.

oa_user · OceanAlt · purpose: user login session · essential · 60 days · httpOnly.

oa_lang · OceanAlt · purpose: language preference saved when you switch language · preference · 1 year · written only when you click the language switch.

oa_p · OceanAlt · purpose: records the referring partner when you arrive via a partner link, for partner attribution · essential (set only on arrival via a partner link) · 365 days · httpOnly.

Analytics cookies: none in use. Marketing/advertising cookies: none in use. No Google Analytics, Meta Pixel or any third-party cross-site tracking.

2. Local storage

Browser local storage is used only for: interface theme preference; drafts you type in the console and onboarding wizard; and a “don't show the subscribe prompt again” flag. This data never leaves your browser. Anonymous query endpoints set no cookie at all (one of the RAP conformance vectors, verified daily).

3. Control

You can delete or block cookies/local storage in your browser or device settings, though login, language, partner attribution or security features may be affected. If non-essential analytics, advertising or cross-site tracking is ever introduced, this Notice will be updated before it is enabled and a consent/withdrawal mechanism provided where required; non-essential options must not be on by default.