Cookie policy
Last updated: 12 October 2026
This is a translation. The Swedish version at /cookies is the authoritative text and prevails in the event of any discrepancy.
What are cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences and improve your experience.
This policy explains which cookies Onesync, a service from Sev Nordic AB (company reg. no. 559595-6052), uses and why.
The kinds of cookies we use
Necessary cookies (always on)
Required for the site to work. These cannot be switched off.
| Name | Purpose | Lifetime |
|---|---|---|
| sb-*-auth-token | Supabase authentication and session | 1 year |
| onesync_marketing_ai | HttpOnly proof granting access to the OneSync AI guide after an accepted contact enquiry. Contains no contact details. | 2 hours |
| onesync_cookie_consent (localStorage) | Stores your cookie preferences in the browser | 12 months, then we ask again |
| onesync_visitor_id (localStorage) | A pseudonymised online identifier linking the browser or device to your consent preferences and the associated consent log | Until you clear browser data |
| cookie_consent_log (database) | GDPR Art. 7 proof of consent (visitor_id, preferences, hashed IP, user agent, timestamp) | 24 months — twice as long as the consent it evidences |
| theme | Remembers dark or light mode | 1 year |
About the identifiers: onesync_cookie_consent and onesync_visitor_id are stored locally in your browser by Onesync and are not shared with any external service. onesync_visitor_id is treated as a pseudonymised online identifier and may constitute personal data where it can be linked to a browser, device, IP address or consent log.
Analytics and statistics (requires consent)
On OneSync marketing pages we use our own visit statistics and, when enabled, Google Analytics 4 for aggregate reports of visits and successful enquiries. Both start only after your analytics consent. Our own measurement uses no analytics cookies or fingerprinting. Google Analytics 4 uses cookies and pseudonymous browser identifiers; Google also receives technical device and network information. We do not send form fields, names, emails, phone numbers, messages, URL query strings or fragments to Google. Google Signals, advertising and ad personalisation features are disabled. You can withdraw consent in the cookie settings.
| Data | Purpose | Lifetime |
|---|---|---|
| _ga / _ga_* | Google Analytics 4: distinguishes browsers and sessions after analytics consent | Default lifetime up to 2 years; may renew on visits. Removed when consent is withdrawn. |
| Page address and referring domain | Which pages are visited and where the visitor came from | Kept until further notice |
| utm_* | Which campaign or link the visit came from | Kept until further notice |
| Clicked link (address and text) | Which routes onward are used | Kept until further notice |
| Country and device type | Rough geography and phone, tablet or computer | Kept until further notice |
| Hashed IP address | Counting a visitor once per day, without being able to identify you | The salt changes every day |
About the IP hash: In our own visit statistics the address is never stored in the clear. It is hashed with SHA-256 together with a salt that changes every day, so this hash cannot recognise the same visitor the following day. Our own measurement stores no lasting identifier. Google Analytics 4 uses separate cookie identifiers as described above.
Marketing cookies (requires consent)
This category exists for future use. We currently use no marketing cookies.
Status: No marketing cookies are active. If we add something like Meta Pixel or Google Ads in the future, this section will be updated with the specific cookie names and purposes.
Session cookies vs persistent cookies
Session cookies
Temporary cookies deleted when you close the browser. Used for security.
Persistent cookies
Stored for a set period. Used to remember settings between visits.
First-party vs third-party cookies
First-party cookies
Set by Onesync. Readable only by our site. Sign-in, theme, cookie consent.
Third-party cookies
Set by external services (Google, Meta). Can track you across sites. Always require consent.
How to manage cookies
On Onesync
- Click "Cookie" in the footer
- Choose which cookie categories you accept
- Save your preferences
Note: Necessary cookies cannot be switched off.
In your browser
- Chrome: Settings → Privacy and security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
Warning: If you block all cookies, sign-in and other features may stop working.
Changes to this cookie policy
We may update this policy when we change our cookies. The latest version is always on this page.
Questions about cookies?
Service: Onesync, a service from Sev Nordic AB
Company registration number: 559595-6052
Email: info@onesync.se