Cookie Policy

What are cookies?

Cookies are small text files a website stores on your device to remember information between visits. They’re used for essential things (like keeping you logged in) and sometimes for optional things (like understanding how the site is used). This page explains what we use, what we don’t, and how you choose.

Our approach

We keep cookies to a minimum. We use:

Strictly necessary cookies (no consent needed under UK law — they’re required to deliver the service you asked for)
Preference cookies (to remember UI choices like dark mode)
Analytics cookies (only with your consent — to understand what’s working and what isn’t)

We do not use advertising cookies, tracking pixels from ad networks, or cross-site profiling cookies. We do not sell data to advertisers.

Cookies we set

Name	Category	Purpose	Lifetime
onlytrade_session	Essential	Keeps you signed in as you move between pages.	Session
onlytrade_csrf	Essential	Prevents cross-site request forgery attacks on forms.	Session
onlytrade_admin_token	Essential	Authenticates admin users. Only set on admin subdomains.	12 hours
onlytrade_consent	Essential	Remembers your cookie preferences so we don’t keep asking.	12 months
onlytrade_theme	Preference	Remembers light/dark mode preference.	12 months
onlytrade_locale	Preference	Remembers language and region settings.	12 months
_ga, _ga_*	Analytics	Google Analytics 4 — understands aggregate usage (IP anonymised). Only set if you’ve consented.	Up to 24 months
ot_posthog	Analytics	PostHog product analytics — self-hosted, measures feature usage. Only set if you’ve consented.	12 months

Cookies set by third parties

Some features rely on third-party services that may set their own cookies:

Service	Category	Purpose
Cloudflare (__cf_bm)	Essential	Distinguishes humans from bots to protect the site from abuse.
Stripe (__stripe_mid, __stripe_sid)	Essential	Fraud prevention during payment. Set only on pages where you’re paying.
YouTube (if embedded)	Non-essential	Video playback & stats. We use privacy-enhanced embeds (youtube-nocookie.com) where possible.

Your choices

In the cookie banner

The first time you visit, we ask whether to enable non-essential cookies. You can:

Accept all — enables analytics and any non-essential cookies
Reject non-essential — only strictly necessary cookies are set
Customise — toggle categories individually

You can change your choice at any time by clicking “Cookie settings” in the footer.

In your browser

Most browsers let you block or delete cookies:

Chrome: Settings → Privacy and security → Cookies
Safari: Preferences → Privacy
Firefox: Settings → Privacy & Security
Edge: Settings → Cookies and site permissions
Mobile browsers: see your browser’s Help

Blocking strictly necessary cookies will stop you logging in, so OnlyTrade won’t work if you do. Blocking non-essential cookies has no impact on functionality.

Do Not Track

We honour “Do Not Track” browser signals by not setting any analytics or marketing cookies when it’s enabled.

Legal basis

We set strictly necessary cookies under the legitimate interest lawful basis, because they’re required for the service to function. All other cookies are set only with your consent, as required by the UK Privacy and Electronic Communications Regulations (PECR) and UK GDPR.

Changes to this policy

If we add, remove, or change our use of cookies, we’ll update this page and reset the consent banner where required. The last-updated date at the top always reflects the current version.

Questions

Email privacy@onlytrade.ai — we’re happy to explain anything that’s unclear.

Cookie banner not appearing? Click “Cookie settings” in the footer to open it at any time.