Cookie Policy
OpenApps sets only the cookies the site needs to keep you signed in and secure. Our analytics set no cookies, and nothing on the site tracks you across other sites.
Effective October 16, 2026Applies to theopenapps.com
The short version
- We only set cookies the site needs to work: to keep you signed in and to protect sign-in.
- Our analytics set no cookies. They keep an identifier in your browser's local storage, and they respect Do Not Track.
- No advertising, social media or cross-site tracking cookies.
- Your theme and display choices are saved in your browser and never sent to us.
This summary helps you find your way. The full text below is what applies.
Contents
1.What cookies are
Cookies are small text files a website stores in your browser and reads back on later visits. Local storage is a similar store that stays in your browser and isn't sent to the website with each request. In this policy, “cookies” covers both, and similar technologies such as tracking pixels.
2.The cookies we use
| Name | Set by | Purpose | Type | How long |
|---|---|---|---|---|
__Secure-better-auth.session_token | OpenApps | Keeps you signed in. Set only when you sign in. It's Secure and HttpOnly, so scripts on the page can't read it. | Essential | 7 days, extended while you use the site; deleted when you sign out |
__Secure-better-auth.state | OpenApps | Protects Continue with Google against forged sign-in requests. | Essential | 5 minutes, only during Google sign-in |
cf_clearance, __cf_bm | Cloudflare, for us | Set only if Cloudflare checks your browser for bots, to protect sign-in, the API and the site from automated abuse. | Essential | Up to 30 minutes |
| PostHog identifier (local storage) | OpenApps, with PostHog | A random identifier that lets us count visits and see how pages are used. Not set when your browser sends Do Not Track. | Analytics | Until you clear it |
oa-theme, oa-chg (local storage) | OpenApps | Remember the theme you chose and whether rank changes compare with the day or the week before. Never sent to us. | Preference | Until you clear it |
Each of these is set on theopenapps.com, by us or by Cloudflare as our provider. None is used for advertising or to track you on other sites.
3.Analytics
We use PostHog to see which pages people read, how they use the site and when something breaks. Your browser sends the events to PostHog through our own domain. We forward the event data and your browser's user agent, but not your IP address or cookies, and we turn off PostHog's IP-based location lookup. The Privacy Policy lists what the events contain.
The analytics keep a random identifier in your browser's local storage instead of a cookie. When you sign in, your activity is linked to an opaque account identifier, never your name or email address. Session replay is off, and the analytics respect your browser's Do Not Track setting.
4.Cookies on Stripe checkout
When you subscribe to Pro, you pay on Stripe's checkout page, and you manage your subscription in the Stripe customer portal. Stripe sets its own cookies there to make payments work and prevent fraud. They're Stripe's cookies on Stripe's site, covered by Stripe's own cookie policy. We don't set any payment cookies on theopenapps.com.
5.What we don't use
- Advertising, retargeting or affiliate cookies.
- Social media pixels, buttons or embeds.
- Cross-site tracking, session recording or browser fingerprinting.
App icons are served from our own domain, so the stores can't see which listings you look at.
6.Controlling cookies
You can see, block and delete cookies in your browser's settings. If you block essential cookies, you can still read OpenApps, but you won't be able to sign in. Signing out deletes the session cookie.
Clearing your browser's data for theopenapps.com removes the analytics identifier and resets your theme to System. Turning on Do Not Track stops our browser analytics.
7.Changes to this policy
If the cookies we use change, we'll update this page first and change the date at the top.
8.Contact
Questions about cookies or privacy: hello@theopenapps.com. Our Privacy Policy explains how we handle personal data in full.