Cookie Policy
Last updated: October 2026
Short version: we use a handful of cookies to keep you signed in, remember your cookie choice, and (only if you say yes) understand how the site is used. No third-party advertising cookies, ever.
Who we are
Offline Rituals is run by Panorama Faustoso LDA, in Portugal. This page lists every cookie the app sets. For how we handle the data behind them, see our privacy policy.
Cookies we set
Here's the complete list - name, how long it lasts, and what it's for:
country - 1 day. Set at the edge (in our middleware) from your network location, so we know whether to ask before turning analytics on. Not used for tracking.
cookie-consent - 365 days. Remembers whether you accepted or declined non-essential cookies, so we don't ask you every visit.
better-auth.session_token (in production, prefixed as __Secure-better-auth.session_token; set by our authentication provider, better-auth) - lasts 30 days. Each day you use the app, it is pushed back to 30 days from then, so it only runs out after 30 days without a visit. Keeps you signed in between visits. Essential - there's no way to stay signed in without it.
or_free_session - 7 days. If you try a ritual before creating an account, this cookie holds an anonymous session ID so your in-progress answers survive a page reload and can be carried into your account if you sign up. It doesn't contain your answers directly, just a reference to them.
or_goodbye - 5 minutes. Set only when you delete your account, so the goodbye page that follows can tell it's you. Holds nothing but a yes.
PostHog analytics cookies (names starting with ph_) - used for product analytics: page views, feature usage, and session replays, so we can see how people actually use the site (session replays on this public site only, never inside the app). They last 1 year. In the EU, the EEA and the UK - and wherever we can't tell where you are - they're set only after you click "Accept". Elsewhere analytics run by default, and you can turn them off at any time under Cookie settings. Either way we never sell this data or use it for advertising.
Our own staff get a few more cookies that visitors never do: the sign-in cookie of Cloudflare Access and better-auth's admin_session for our support tools, and or_maintenance_bypass (12 hours) for checking the app while it is down for maintenance.
Stored in your browser
A few things are kept in your browser's storage rather than in a cookie:
or_free_ritual_v2 (local storage) - while you play a free ritual, your answers are saved on this device so a reload doesn't lose them. Removed when you sign in to an account, or after a day untouched.
or_stale_deploy_reload_at (session storage, gone when you close the tab) - when we've just released a new version, the app reloads itself once to pick it up; this stops it reloading again in a loop.
contact-submitted (session storage, at most 15 minutes) - after you send the contact form, lets the page say your message went through.
PostHog's own entries (names starting with ph_ or __ph_, only once analytics are allowed, and only where cookies can't be shared between our two sites) - the same analytics state as the cookies above.
Your choice
Choosing "Decline" keeps PostHog turned off - only the essential cookies above (country, cookie-consent, the sign-in session cookie, or_free_session and or_goodbye) are set. You can change your mind at any time, wherever you are: (also at the foot of every page) brings the choice back.
Why we don't need more
We don't use advertising or retargeting cookies, and we don't sell or share cookie data with anyone outside the services listed above. If that ever changes, we'll update this page and, for anything material, tell subscribers by email.
Questions?
Email support@offlinerituals.com. I read every message.