What OpenTremor keeps in your browser

A handful of cookies that sign you in and remember your settings. No advertising, no cross-site tracking, and nothing from a third party.

Every cookie we use

Strictly necessary ones are exempt from consent under EU rules: the service can't work without them.

mcp_session

Keeps you signed in, and remembers which organization you're working in.

Strictly necessary · Until you sign out, or 8 hours (set by your administrator)

oauth_state

Protects a sign-in with GitHub, Google or Microsoft against request forgery.

Strictly necessary · 10 minutes

sso_state

Protects a single sign-on login against request forgery.

Strictly necessary · 10 minutes

cookie_consent

Remembers the cookie choices you made here, so you aren't asked on every visit.

Strictly necessary · 6 months

sidebar_state

Remembers whether you left the sidebar open or collapsed.

Strictly necessary · 7 days

themelocal storage

Remembers whether you picked the light or dark theme.

Strictly necessary · Until you clear your browser data

Name	What it's for	Category	Kept for
`mcp_session`	Keeps you signed in, and remembers which organization you're working in.	Strictly necessary	Until you sign out, or 8 hours (set by your administrator)
`oauth_state`	Protects a sign-in with GitHub, Google or Microsoft against request forgery.	Strictly necessary	10 minutes
`sso_state`	Protects a single sign-on login against request forgery.	Strictly necessary	10 minutes
`cookie_consent`	Remembers the cookie choices you made here, so you aren't asked on every visit.	Strictly necessary	6 months
`sidebar_state`	Remembers whether you left the sidebar open or collapsed.	Strictly necessary	7 days
`theme`local storage	Remembers whether you picked the light or dark theme.	Strictly necessary	Until you clear your browser data

Optional cookies wait for your yes. Nothing outside the strictly necessary category is set until you accept it. Your choice — a refusal included — is kept for six months, then you're asked again. You can change it or withdraw it at any time.

Self-hosting? On an instance your company runs, it controls these cookies, not us. The list above is what OpenTremor itself sets; anything your administrator adds in front of it — a load balancer, a single sign-on proxy — comes on top.