legal
Cookies & Local Storage
draft — pending legal review. Prepared for internal review; not legal advice. Entity, jurisdiction and VAT details must be confirmed before launch.
The short version: no third-party cookies and no ad trackers — none. We use first-party browser storage for three honest jobs: keeping you signed in (admin only), remembering what you've seen so the vault stays fresh, and applying your arrival-context theme for the session.
| storage item | type | purpose | lifetime |
|---|---|---|---|
| oo1_seen_v1 | localStorage | Which designs you've scrolled past, so the feed never repeats itself. First-party, anonymous. | ~30 days (auto-pruned); erasable below |
| oo1_visitor | localStorage | Random ID (no personal data) so your server-side feed memory and daily deal stay consistent. | Until erased below |
| oo1_signals / oo1_persona | sessionStorage | Which link brought you (e.g. a campaign tag) → your theme + feed weighting for this session only. | Tab session |
| oo1_lock_* | localStorage | Proves the 15-minute reservation on a design belongs to you — survives closing the browser, so your reserved 1-of-1 is still yours when you come back. | Expires with the reservation (15 minutes); auto-pruned; erasable below |
| admin session cookie | cookie (HttpOnly) | Signed-in state for the shop operator's private panel. Not set for shoppers. | 8 hours |
What we never do
- No advertising cookies, no pixels, no retargeting audiences.
- No cross-site tracking, no fingerprinting, no data brokers.
- No selling or renting of any data — ever.
Take control
Your browser settings can clear all of the above at any time. Our own one-click eraser lives on the privacy page — it wipes both the browser copy and our server copy of your feed memory.
Questions: 1of1toall@gmail.com · last updated September 2026