Legal

Cookie Policy

Last updated · 17 April 2026

This page explains exactly what Olakh stores on your device when you visit olakh.app, why, and how to control it. It covers cookies, localStorage, sessionStorage and any other similar technologies — all of which the ePrivacy Directive (“the cookie law”) treats the same way.

You can change your choices at any time:

The short version

  • We don’t use ad trackers, behavioural pixels, browser fingerprinting, or any third-party marketing cookies.
  • The only thing we store by default is your cookie choice itself, so we don’t pester you every time you visit.
  • Everything else (analytics, marketing) is off by defaultand only turns on if you explicitly opt in.
  • You can withdraw consent at any time — one click, no account required.

What we store

Strictly necessary

  • olakh.consent.v1 — a small JSON record in your browser’s localStorage that remembers your cookie choices and when you made them. Without this, we’d have to ask you on every page. Lifespan: until you clear it or withdraw consent.

Analytics (opt-in)

If you allow analytics, we load a small script from analytics.olakh.app. That is our own self-hosted Umami instance — open-source, privacy- first analytics that we run on the same EU-based server as the rest of Olakh. It does not use third parties and it does not set cookies.

What it records, per page view:

  • the page you visited (e.g. /, /privacy);
  • a hashed, salted identifier that resets every day — this lets us count unique visits without recognising you across days;
  • referrer, device type, browser and country (derived from IP and then immediately discarded — the raw IP is never stored);
  • a handful of engagement events we explicitly trigger: which call- to-action you clicked, whether the AI-Agent demo returned a result, and which app store you chose. Events never contain the email you looked up or any free-form input.

Data is kept for 12 months, then deleted. You can opt out any time — we tear the script down immediately when you do.

Marketing (opt-in)

We do not currently use any marketing or advertising cookies. This category exists only so that your preference is recorded should that ever change — and even then, it would only turn on if you opt in.

Third-party services

Embedded elements on this site may load resources from the following third parties. None of them set tracking cookies on our behalf:

  • Google Fonts — the Geist typeface is served from fonts.gstatic.com. Google may log the request IP as part of ordinary CDN operation. No cookies are set.
  • api.olakh.app — our own backend, called only when you use the AI Agent email-preview feature. We log the request to enforce a rate limit; we do not retain the email address you enter for preview lookups.
  • analytics.olakh.app — our own self-hosted Umami instance. Only loaded if you opt in to analytics. Same server, same company, no third parties.

Your rights

If you are in the EU/EEA, UK or Switzerland, the GDPR gives you the right to access, correct, delete, port and object to processing of your personal data. For cookies specifically, you can withdraw consent at any time using the button above or by clearing your browser storage.

Questions or complaints? Write to privacy@olakh.app. You also have the right to lodge a complaint with your local data-protection supervisory authority.

Changes to this policy

If we add a new cookie or change an existing one, we’ll bump the policy version, and the banner will ask for your consent again before anything new is set.