OceanLog uses only strictly necessary cookies, and only inside the administrator area. A rider — anyone using the app to log sessions — is never sent a cookie. Verified live: no Set-Cookie header is returned on the home page, the app, the privacy page or the location endpoint.
| Name | Who receives it | Purpose |
|---|---|---|
ol_admin | Administrators only | Gates the admin area. Set by our server, signed, and dropped on sign-out. |
ol_admin (device) | Administrators only | "Remember this device" for the second authentication factor. Also dropped on sign-out. |
Spanish and EU guidance covers "cookies y tecnologías similares", so the browser storage we do use belongs here even though none of it is a cookie. All of it is first-party, stays on your device, is read only by our own code, and is never transmitted to a third party or used to profile you.
| What | Why | Category |
|---|---|---|
| Your sign-in session | Keeps you signed in between visits | Strictly necessary |
| An invitation you followed | Carries a crew or friend invite across sign-in so it is not lost | Strictly necessary |
| Language, theme, text size, colour-vision mode | Shows the app the way you set it | Preference / accessibility |
| Metric or imperial | Shows measurements in your units | Preference |
| Your heart-rate zones | Numbers you entered yourself | Preference |
| Guide and reminder counters | Stops a one-off tip showing forever | Preference |
Clearing your browser's site data removes all of it. You stay signed out and the app returns to its defaults; nothing you have logged is affected, because your sessions live in your account, not in your browser.
No analytics, advertising, profiling or third-party tracking of any kind. That is not only a policy — it is enforced by the app's Content Security Policy, which permits outbound connections to a short list of named services and would block a tracking script even if one were added by mistake.
Two services receive your IP address because your browser talks to them directly, which is unavoidable for what they do:
Neither sets a cookie in our app, and neither receives your account, your sessions or anything you have written. Weather, wave, tide and place data are fetched by our servers, not your browser, so those providers never see your IP address at all.
Everything above is either strictly necessary to run the service or a preference you set yourself. There is nothing here that a consent banner would exist to ask about, which is why you are not shown one.
If we ever add storage that is not strictly necessary or a preference, this page changes first and we ask you before setting it.
v1.0 · last verified 15 September 2026 · © 2026 DSM Mallorca SL, trading as OceanLog