Last updated: 2026-07-08
1. What Are Cookies
Cookies are small text files websites store on your device to remember preferences or login state. The Service also uses the browser’s localStorage / sessionStorage (same idea).
2. Cookies / Storage We Use
Essential cookies (cannot be disabled):
- Firebase Auth session: keeps you signed in
NEXT_LOCALE: remembers your UI language choice (Traditional Chinese / English)
Preference storage (localStorage):
omipoka_welcomed: flag that the welcome modal has been shownomipoka_en_banner_dismissed_v1: flag that the English UI announcement toast has been dismissedomipoka_device_id: cross-session device identifier (for FCM push, no personal data)
Third-party cookies:
- Google account sign-in: Google sets its own cookies when used
Analytics Cookies (with your consent)
After you choose “Accept all” on the cookie banner, we use:
- Google Analytics 4 (loaded via Google Tag Manager):
_ga,_ga_*cookies for anonymous traffic and conversion analysis. No name, email, phone or address is collected. omipoka_consent: remembers your cookie choice (180 days, shared between omipoka.com and app.omipoka.com).omipoka_attr: records the channel of your first visit (UTM parameters, referrer domain, landing path; 90 days) so we can understand which marketing channels work. It contains no personal data.
You can withdraw consent anytime by clearing your browser cookies; choosing “Essential only” keeps all of the above off.
3. What You Can Do
You can block or delete cookies in your browser settings. Blocking essential cookies may break features like staying signed in.
Where to find cookie controls:
- Chrome: Settings → Privacy and security → Cookies
- Safari (Mac): Safari → Settings → Privacy → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Use the “Cookie Preferences” link in the footer to change your choice at any time
4. Changes
This policy may change as new features add new cookies. Material changes will be announced via the dashboard.
5. Tap Event Tracking
When any visitor taps an NFC card and lands on the public page, the Service records:
- Visit timestamp
- Referrer
- Country (inferred from the Cloudflare edge IP — no precise location)
This data is stored in the Firestore tap_events collection and used for:
- Showing the card owner the “tap count” (Tap Analytics feature)
- Anomalous-tap alerts (auto-notify the owner when one card is tapped > 10 times in an hour)
If a visitor additionally taps the “Share location to help locate” button, precise GPS coordinates are captured and attached to that tap_event. See Privacy Policy §8.
6. Cookie Banner & Consent
On your first visit, a cookie consent banner appears at the bottom of the page:
- “Accept all”: enables the items listed in the “Analytics Cookies” section above
- “Essential only”: uses only the essential cookies required to keep the Service running, with no analytics enabled
- Your choice is recorded in
omipoka_consent(180 days, shared between omipoka.com and app.omipoka.com), and you won’t be asked again during that period - To change your choice, click “Cookie Preferences” in the footer to reopen the banner, or clear your browser cookies
7. Contact
Questions: [email protected]
⚠️ This policy is a DRAFT — not to be treated as final until reviewed by counsel.
