Legal
Cookie Policy
Last updated: October 22, 2026
This Cookie Policy explains how OpenEduCat Inc. ("we", "us") uses cookies and similar browser storage on the oec.sh website and in the oec.sh dashboard at platform.oec.sh. Analytics and advertising cookies are only used if you accept them. Everything else listed here is needed for the site to work.
1. What Are Cookies?
Cookies are small text files a website saves in your browser. Websites can also keep data in the browser itself ("local storage" and "session storage"). This policy covers all of these, and the tables below say which kind each item is.
2. Your Choice
The first time you visit, a banner asks whether you accept analytics and advertising cookies. Until you answer, none of them are set. On oec.sh, Google's tag stores nothing on your device and sends Google only basic signals without cookies, such as a page being viewed. In the dashboard, Google's tag is not loaded at all. LinkedIn and PostHog are not loaded anywhere until you accept.
- Accept All turns on analytics and advertising cookies.
- Essential Only keeps them all off.
- Customize lets you choose analytics and advertising separately.
The website and the dashboard share your answer where they can. If you accept all or choose essential only on oec.sh, the dashboard uses the same answer and does not ask again. If you decline in the dashboard, oec.sh does not ask either. Two cases still ask again: accepting in the dashboard does not cover LinkedIn, which only oec.sh uses, so oec.sh asks you itself; and if you choose analytics but not advertising (or the reverse) on oec.sh, the dashboard asks its own single yes/no question.
3. Cookies We Use
3.1 Essential: website
Needed for the website to work and to remember your cookie choice. They are always on.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| cookie_consent, cookie_consent_date | oec.sh (browser storage) | Your cookie choice on this website and when you made it | Until you clear it |
| oec_analytics_consent | oec.sh (cookie on .oec.sh) | Shares your yes/no answer between this website and the dashboard, so you are asked once | 1 year |
| theme-preference | oec.sh (browser storage) | Light or dark mode | Until you clear it |
| oec_paid | oec.sh (cookie on .oec.sh) | First-touch marketing attribution: records which landing page a visitor from one of our ads first arrived on, so if the same person comes back and signs up later we can still tell they came from an ad. No Google identifiers. | 30 days |
3.2 Essential: dashboard
Needed to sign you in and keep the dashboard working. They are always on.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| access_token | oec.sh (cookie on .oec.sh) | Keeps you signed in. Not readable by page scripts. | 8 hours |
| refresh_token | oec.sh (cookie on .oec.sh) | Renews your sign-in without asking for your password. Not readable by page scripts. | 30 days |
| selected_org_id | oec.sh (cookie) | Which of your organizations is selected | 30 days |
| session_id | Your Odoo environment's address | Signs you into your own Odoo environment when you use Connect As | 1 hour |
| oec_analytics_consent | oec.sh (browser storage and cookie) | Your yes/no answer to analytics and advertising cookies | 1 year |
| oecsh-auth, oecsh-organization | oec.sh (browser storage) | Your name and the selected organization, for display. No passwords or sign-in tokens. | Until you sign out or clear it |
| theme, darkMode, oecsh:list-pref:*, oecsh:freetier-ribbon-snooze:*, checklist-dismissed-* | oec.sh (browser storage) | Display preferences: theme, list layout, notices you dismissed | Until you clear it |
| pendingPlanUpgrade | oec.sh (browser storage) | The plan you picked before signing in, so checkout can continue | Removed after you sign in |
3.3 Analytics (only if you accept)
Help us see which pages and features are used, so we know what to improve.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics (website and dashboard) | Tells visits from the same browser apart | 2 years |
| _ga_F99M3211JF | Google Analytics (website and dashboard) | Keeps track of the current visit | 2 years |
| ph_phc_*_posthog | PostHog (dashboard only; cookie on .oec.sh and browser storage) | Product analytics: which dashboard features are used. On-screen text is masked and sessions are not recorded. | 1 year |
| ph_phc_*_window_id, ph_phc_*_primary_window_exists | PostHog (dashboard only; browser session storage) | Tells browser tabs apart within a visit | Until the tab is closed |
3.4 Advertising (only if you accept)
Tell us which of our ads bring people to oec.sh, and can be used to show our ads to people who visited before. Google and LinkedIn may set further cookies of their own, for example when you are signed in to your Google or LinkedIn account; those are covered by their policies linked in section 5.
| Name | Set by | Purpose | Duration |
|---|---|---|---|
| _gcl_au, _gcl_ls | Google Ads (website and dashboard; cookie and browser storage) | Measures whether a visit or sign-up came from one of our Google ads | 90 days |
| IDE | Google (doubleclick.net) | Ad measurement, and can be used to show our ads to people who visited before | 13 months |
| bcookie | LinkedIn (linkedin.com, website only) | Identifies the browser to LinkedIn | 1 year |
| li_gc | LinkedIn (linkedin.com, website only) | Stores your consent choice for LinkedIn | 6 months |
| lidc | LinkedIn (linkedin.com, website only) | Picks the LinkedIn data center that serves the request | 1 day |
| __cf_bm | LinkedIn (linkedin.com, website only) | Bot protection on LinkedIn's servers | 30 minutes |
3.5 Support chat and payments
- Support chat (tawk.to): nothing from tawk.to loads until you click "Chat with support" in the dashboard. After that, tawk.to stores its own cookies and browser data to keep your conversation connected.
- Payments (Stripe): card payments happen on Stripe's own checkout page, where Stripe sets its own cookies, for example for fraud prevention.
4. Changing Your Mind
You can change or withdraw your choice at any time:
- On oec.sh: click "Cookie settings" at the bottom of any page.
- In the dashboard: open the privacy page and click "Change cookie choice".
If you answered in both places, change it in both: each site keeps its own copy of your answer.
When you turn analytics or advertising off, we delete the Google and PostHog cookies already stored for oec.sh. Cookies that Google and LinkedIn keep on their own domains can only be removed through your browser settings or your account with them.
Browser settings
Most browsers let you block or delete cookies:
If you block essential cookies, you will not be able to sign in to the dashboard.
5. Third Parties
These services set or read the cookies above. Their own policies explain how they handle the data:
- Google (Analytics, Ads): Privacy Policy, how Google uses data from sites that use its services
- LinkedIn (Insight Tag, website only): Cookie Policy
- PostHog (product analytics, dashboard only): Privacy Policy
- tawk.to (support chat, dashboard only): Privacy Policy
- Stripe (payments): Privacy Policy
The full list of companies that process data for us is on our sub-processors page.
6. Do Not Track
Our website does not respond to browser "Do Not Track" signals. Use the cookie banner or "Cookie settings" to control tracking.
7. Updates to This Policy
We update this policy when the cookies we use change. The "Last updated" date at the top shows when it was last revised.
8. Contact Us
If you have questions about our use of cookies:
OpenEduCat Inc.
2803 Philadelphia Pike, Suite B #1117
Claymont, DE 19703
United States
Email: privacy@oec.sh
Related Legal Documents: