Cookie Policy

Last updated: May 2026

The short version

OnRail uses exactly one cookie: a session cookie that keeps you signed in. We do not use advertising cookies, analytics cookies, or any third-party tracking cookies. There is nothing to opt out of beyond what is strictly necessary to run the service.

What is a cookie?

A cookie is a small piece of text stored in your browser by a website. Cookies serve different purposes — session management, preferences, analytics, and advertising. Not all cookies are equal. We only use cookies that are strictly necessary for the service to function.

The cookie we set

Name Purpose Expiry Type
_onrailapp_key Keeps your session active while you use the app Session (cleared when browser is closed) Strictly necessary

This cookie is signed and cannot be tampered with. It contains only a session identifier — no personal data is stored inside it. The actual session data lives on our servers.

What we do not use

  • Google Analytics or any analytics cookies
  • Facebook Pixel or similar advertising trackers
  • Cross-site tracking cookies
  • Affiliate or marketing attribution cookies
  • Any third-party cookies beyond what is listed above

We do use PostHog for product analytics, but it is configured in server-side mode — no cookies or browser fingerprinting are involved. Events are tied to your account, not your browser.

Local storage

We use your browser's localStorage solely to remember that you dismissed this cookie notice. No personal data is stored there.

Managing cookies

Because we only set a strictly necessary session cookie, blocking or deleting it will sign you out of your account. You can manage or delete cookies through your browser settings — but doing so will affect your ability to use OnRail.

Most browsers let you view, delete, or block cookies in the privacy or security settings. Common browser guides:

Questions

Any questions about this policy? Email privacy@onrail.app.