Cookies
Short version: we set three strictly necessary cookies that keep you signed in and protect sign-in, and one that remembers the language you picked, and there are no advertising or tracking cookies in this application.
What we set
| Name | Purpose | Type | Lifetime |
|---|---|---|---|
opbjj_session | Keeps you signed in | Strictly necessary | 30 days |
opbjj_oauth_state | Protects Google/Apple sign-in against forgery | Strictly necessary | 10 minutes |
opbjj_oauth_pending | Holds a sign-in in progress while you finish linking or creating your account | Strictly necessary | 10 minutes |
opbjj_locale | Remembers the language you picked when you're signed out | Preference (set only when you choose a language) | 1 year |
All three are HTTP-only and sent only over HTTPS. opbjj_session is SameSite=Strict. The two sign-in cookies are SameSite=Lax, because they have to survive the redirect back from Google or Apple.
What we do not set
No advertising cookies. No third-party analytics cookies. No cross-site tracking pixels. No fingerprinting.
No consent card. We only use what the app needs to work, so there is nothing to accept or refuse. We keep anonymous daily totals of how often each sign-up step is reached (Privacy Policy, "Anonymous step totals"); they use no cookie and store nothing on your device. If we ever add analytics that does, we will ask first.
Local storage
The app keeps small items in your browser's local storage — your chosen view, draft form input, and a cached copy of your last screen so the app opens instantly. This includes your theme and navigation choices, a flag that you've seen the welcome screen, and — on an academy's check-in kiosk only — the kiosk's own sign-in token. None of it is used for tracking. This never leaves your device. Clearing site data removes it.
Questions: support@opbjj.com.
Global Privacy Control
We honour the Global Privacy Control signal. In practice there is nothing for it to turn off, because we do not sell or share personal information and we set no advertising or analytics cookies.