Cookie Policy
Last updated: 2026-09-26
Outbly uses cookies that are strictly necessary for the service to work: they need no consent. If audience measurement is enabled, it only covers the public site (never the signed-in application) and starts only after you accept (Google Analytics, no advertising).
| Cookie | Purpose | Duration |
|---|---|---|
| oa_session | Keeps you signed in (random token; only its hash is stored on our side). httpOnly, Secure, SameSite=Lax. 30 days (sliding) | 30 days (sliding) |
| oa_oauth_state | Protects Google/Microsoft sign-in and mailbox connection against CSRF during the OAuth redirect. 10 minutes | 10 minutes |
| locale | Remembers your interface language. 1 year | 1 year |
| cookie_consent | Remembers your cookie choice. 6 months | 6 months |
| _ga | Google Analytics: tells visitors apart to measure the audience of the public site. Set only if you accept. 13 months | 13 months |
| _ga_<ID> | Google Analytics: keeps the state of the current visit. Set only if you accept. 13 months | 13 months |
Managing cookies
You can change or withdraw your choice at any time with the “Cookie settings” link at the bottom of the page, or delete cookies in your browser settings. Blocking the session cookie prevents you from signing in. Questions: privacy@outbly.com.