Octulpit

Cookies Policy

Updated 5 November 2026

English is the primary version. Thai and Traditional Chinese translations are provided for convenience. Applicable mandatory rights are unaffected.

1. What cookies are

Cookies are small pieces of information stored by a browser and sent to a server under the cookie's conditions. Octulpit uses them to operate accounts and protect the sign-in process.

2. Cookies set by the service

octulpit.session_token — necessary for sign-in and access to your account. Sessions are configured for 90 days and may be renewed when you return.

octulpit.state — necessary to verify that a Google sign-in or account-linking flow was initiated by you. Expires within five minutes and is removed when the flow completes.

Cookie names may include the __Secure- prefix over production HTTPS. Account cookies use HttpOnly and SameSite=Lax. Local HTTP development uses different Secure settings.

3. Browser storage other than cookies

localStorage stores themes, text size, preferences and browser copies of profiles, charts or history. It has no automatic cookie-style expiry and remains until cleared by the service or browser.

sessionStorage stores temporary settings and entitlement caches. Entitlement caches are valid for five minutes. Storage usually ends when a tab or window closes, but session restoration may restore it.

This information is not attached to every request like a cookie. After sign-in, the service may import or synchronise profiles, charts and history with your account. Clearing browser data does not erase server information.

4. External services and tracking

The application code does not install advertising cookies or third-party analytics. If you choose Google sign-in, you visit Google's service, which uses its own cookies and policies.

Infrastructure providers may use security cookies or mechanisms according to enabled settings. This list describes the current application configuration and must be reviewed when deploying or adding external services.

When you search for a place or open a map, the browser connects to the Open-Meteo Geocoding API or OpenStreetMap for that feature. Those providers receive connection information and the search text or map area requested.

5. Managing or removing stored information

Sign out to end your current session.

Open your browser's privacy settings, select this website, and clear its cookies and site data.

Blocking necessary cookies may prevent sign-in or Google account linking.

Clearing site data may remove unsynchronised profiles and history and reset themes and preferences.

If the website and API use separate domains, review and clear both domains.

To request erasure of personal information held on the server, use the contact details in the Privacy Policy. Removing cookies alone does not do this.

6. Changes and contact

We will update this policy when cookie or storage use changes and provide appropriate choices before using technologies requiring consent under applicable law.

Contact: [email protected]. See the Privacy Policy for information about personal-data handling and your rights.

ตั้งค่าคุกกี้

จัดการคุกกี้และดูว่าข้อมูลประเภทใดถูกใช้ในเว็บไซต์นี้