Cookie Policy

Last updated: May 3, 2026

Introduction

This Cookie Policy explains how Data Owl uses cookies and similar technologies. We believe in transparency and respect your privacy.

Strictly Necessary Cookies Only

Data Owl only uses "strictly necessary" cookies. We do not use any third-party tracking, advertising, or marketing cookies. The cookies we set are essential for the core functionality of our application, enabling you to log in, navigate securely, and use the platform's features.

Cookies We Use

Our application utilizes the following categories of essential cookies:

Authentication & Session Management

These cookies are used to keep you securely logged into your account and identify your organization.

  • user_id: Identifies your user session.
  • organization_id: Identifies your active workspace/organization.
  • data_owl_access_token & data_owl_refresh_token: Secure tokens used to authenticate your requests to our backend services.

Authentication Flow State

These temporary cookies are used during the login and sign-up process to maintain state between different steps (such as OAuth redirects or organization selection).

  • oauth-state: Secures OAuth login flows against Cross-Site Request Forgery.
  • pending-auth-token & pending-orgs: Temporary storage used while you select an organization during login.
  • show-connect-prompt: Manages UI prompts related to account connections.

Security

These cookies protect the application and your data from malicious attacks.

  • csrf_token: Protects against Cross-Site Request Forgery (CSRF) attacks.

Billing State

These cookies are used to maintain your context during subscription and payment flows.

  • billing-resume: Remembers where you were before entering the billing portal.

Security Note

In our production environment, most of these cookies are prefixed with __Host-. This is a security measure that ensures the cookies are only sent over secure (HTTPS) connections and are locked to our specific domain, preventing them from being accessed by subdomains or other sites.

Managing Cookies

Because the cookies we use are strictly necessary for the application to function, you cannot opt out of them through our platform. You can configure your browser to block or alert you about these cookies, but please note that if you do so, core parts of the application (such as the ability to log in) will not work.

Contact Us

If you have any questions about this Cookie Policy or our data practices, please contact us at:

Data Owl Privacy Team

Email: privacy@dataowl.app