Privacy and data

What we store, why, and for how long — written from what the site actually does rather than from a template, so you can check it against your own browser.

What we set in your browser

Open your browser's storage inspector and you will find these and nothing else of ours. Clearing them costs you nothing except being recognised on a return visit.

NameStored asKeptWhat it is for
of_anon_idlocalStorageAcross visitsTies the pages you view in one browser together, so analytics counts one visitor rather than many.
of_session_idsessionStorage and cookieOne visitGroups a single visit.
orf_uidCookie730 daysSent to Meta as an identifier when you submit a form, so an ad click can be matched to a conversion.
lb_rutCookie, httpOnly2 yearsRecognises you on a return visit, and gates whether an existing Stripe customer record may be reused at checkout.
orf_ftCookie, httpOnly180 daysRecords the first page, referrer and campaign that brought you here. Never overwritten, and only set when a campaign parameter is present.
orf_fbc / _fbpCookie90 daysMeta advertising identifiers, used to attribute an ad click.
of_internalCookie730 daysMarks a browser as ours, so our own testing is excluded from reporting.

Who else processes it

The same list published on our security page, because there should only be one.

  • Stripe

    Payments and billing

  • Supabase

    Application database

  • Xano

    Order and placement records

  • Vercel

    Hosting

  • Sentry

    Error monitoring

  • LogRocket

    Session replay and diagnostics

  • Google

    Analytics and advertising measurement

  • Meta

    Advertising measurement

Card details

We never see them. Payment details are entered on Stripe's own hosted checkout; our servers hold a Stripe customer reference and nothing that could be used to charge a card elsewhere.

Asking us about your data

Email jason@outreachfrog.com and a person will answer. If you want a copy of what we hold, or want it deleted, say so and we will do it.

This page describes what the site does. It is not a substitute for a reviewed privacy policy, and it makes no claim about legal basis or transfer mechanisms — when a reviewed policy exists it replaces this page. Our terms and conditions cover the commercial side, including renewals and refunds.