This policy describes how ORA uses cookies and similar tracking technologies. We have designed ORA to minimize data collection. Our analytics are cookie-free.

What We Use

Essential Session Cookies

ORA sets one session cookie when you log in. This cookie:

Maintains your authenticated session
Expires when you close your browser or after 24 hours of inactivity
Contains only an encrypted session identifier — no personal information
Is required for ORA to function — it cannot be disabled

Preference Cookies

If you configure ORA settings (model preferences, governance defaults, UI preferences), these are stored in localStorage — not cookies — on your device.

What We Do NOT Use

No advertising cookies. We do not serve ads and do not use ad tracking.
No cross-site tracking. We do not track you across other websites.
No third-party marketing cookies. No Facebook Pixel, Google Analytics, or similar.
No fingerprinting. We do not use browser fingerprinting.

Analytics (Cookie-Free)

We use Cloudflare Web Analytics to understand how ORA is used. Cloudflare Web Analytics is designed to be privacy-respecting by default:

No cookies are set by the analytics script
No personal data is collected
No cross-site tracking
GDPR and CCPA compliant by design
Provides aggregated metrics only (page views, performance)

Your Controls

You can delete the session cookie by clearing your browser cookies or logging out
You can delete localStorage data via your browser developer tools
Most browsers allow you to block all cookies, but this will break ORA authentication

Contact

Cookie questions: [email protected]

Cookie Policy