Ondera

Your privacy

Cookie policy.

Last updated:

This policy explains how the Ondera website uses cookies and similar technologies to store information in your browser. With your acceptance, Good Systems analytics records visits and approved app-link selections on home, support, privacy, terms and cookies. FAQ changes and related-product link measurement stay on the homepage. With your acceptance, Google analytics records visits and approved app-link selections on production home, support, privacy and terms. Google FAQ changes and related-product link measurement stay on the homepage. Website-to-app identifier forwarding requires a separately enabled handoff and your acceptance. Read this policy alongside the Good Systems Privacy Policy and Good Systems Cookie Policy.

Analytics cookies, saved campaign attribution and interaction measurement require your acceptance. When enabled, limited entry measurement can run before you choose. Decline stops future entry measurement too.

When you follow a link to the Ondera app, we pass along valid campaign labels from the current page URL, even if you decline analytics. This forwarding does not save analytics data in your browser or send a website analytics event. If you accept analytics, app links use the saved campaign attribution instead. Website identifiers are forwarded only when the handoff is enabled and you have given the version 3 acceptance described below. Old version 2 acceptance cannot authorize it.

Who we are

Ondera is operated by Good Systems, Inc. You can reach us with questions about this policy at support@goodsystems.com.

What we store

Cookies, local storage and session storage let a website remember information in your browser. Good Systems analytics uses local storage and session storage. Google analytics, when enabled, uses cookies on this website. We remember whether you accept or decline analytics using ondera-analytics-consent-v3. This preference stays saved until you change it, clear site data or we update the consent version. A saved acceptance applies only to the providers named when you accept. If we add another provider, we ask you to choose again. Old version 2 acceptance requires a fresh choice for this measurement. A saved decline continues to keep analytics off.

When either analytics provider is enabled and you accept analytics, this website saves valid campaign labels in local storage under ondera-analytics-attribution. We keep these labels for up to 30 days. A different campaign replaces them. This website storage is separate from Google cookies and Google server retention.

Entry measurement

When entry measurement is enabled, this website sends a limited homepage arrival event to our existing Good Systems analytics service before analytics acceptance, to understand email arrivals and improve this website. It includes the entry time and known email campaign labels or an unlabelled category. It excludes browser and session identifiers, saved attribution, account links and browsing history. This measurement is intended for daily totals in ClickHouse.

The existing Decline button and Analytics settings control also stop future entry events. A saved decline or withdrawal will remain an objection. Changing your choice cannot recall an entry already received. Reloads, duplicate requests and automated browsers can count again. These totals will count requests, not unique people, and will remain separate from consented page views.

Optional analytics

When Good Systems analytics is enabled and you accept analytics, we save random browser, session and funnel identifiers in browser storage. We use these to understand page visits, app-link clicks, related-product links and FAQ interactions. A website click does not tell us that you have completed signup in the app. Analytics identifiers and campaign information are only saved after you give consent.

  • Session storage ondera-analytics-funnel-context-v1 keeps versioned entry metadata bound to ondera-analytics-funnel-id. It has no age expiry and lasts until the tab closes or analytics storage is cleared, including withdrawal. Browsers can copy session storage into another tab. Without reliable storage, we omit retained entry context.
  • After a saved Good Systems analytics acceptance, a temporary marker with the prefix ondera-analytics-storage-probe- checks local and session storage. Its suffix separates page documents and is not an analytics identifier. The marker is removed after the check. Failed cleanup prevents retained entry context from being used in that page.
  • The Good Systems browser identifier remains until you turn analytics off or clear site data. Its session and funnel identifiers last for the browser tab session.
  • Website campaign information is kept for up to 30 days with either analytics provider. Arriving through a different campaign replaces it.
  • Good Systems analytics keeps up to 25 events that could not be sent for retry, with no automatic expiry. Google keeps pending website events in memory for the current page only.

When Good Systems analytics is enabled and you accept analytics, events go to the shared Good Systems analytics service. They include random identifiers, the page visited, interaction details and campaign labels. Referring links are limited to their website origin, and clicked links to approved origins and paths. These links exclude credentials, query strings and fragments. The service may add geographic and network information, such as city, country and network provider.

If browser storage is unavailable, this information is kept in memory for the current page only. Turning analytics off clears the saved identifiers, campaign information and unsent events. It does not delete events already received by the analytics service.

With your acceptance of Good Systems analytics, we record visits and approved app-link selections on home, support, privacy, terms and cookies. We retain the entry page, entry time and referring website origin during internal navigation, reload and history traversal. A later external entry updates that context without changing the funnel identifier. Referring paths, queries and fragments are excluded. Without usable external referrer evidence, the entry source is direct or unknown, independently of saved campaign labels. Google receives none of these entry fields.

Website-to-app measurement

Website-to-app measurement requires an enabled handoff release and your explicit version 3 acceptance of Good Systems analytics. Old version 2 acceptance cannot authorize it. A saved decline keeps analytics off.

When the handoff is enabled, and with your version 3 acceptance of Good Systems analytics, we add a random funnel identifier and a click identifier to approved links to the Ondera web app. They will retain the entry page, selected button or link, valid campaign labels, and the referring website origin. We will exclude referring paths, query strings, and fragments. This lets us connect a website journey with app arrival and a verified sign-in. A verified sign-in can link this journey to your app account. With a verified recent registration, the app can also record a signup observation using the original registration time. A sign-in alone does not prove that you created an account.

The funnel identifier will stay in tab session storage until the tab closes or analytics storage is cleared, including when you withdraw consent. Each app-link selection will allow up to 24 hours to connect its app arrival and verified sign-in. Reloads and sign-in will not extend that selection's window. Browser tabs can copy session storage when they open. We will preserve the entry page and referring website origin during internal navigation and reload, and update them on a later external entry in the same tab. If no usable external referrer is available, the entry source will be direct or unknown. Saved campaign labels will keep their separate limit of up to 30 days. A campaign change will not change the funnel identifier or entry source. Google analytics will receive none of these new identifiers or app account information.

Before acceptance or after decline, app links can still pass valid campaign labels from the current URL. This does not save website analytics data or send a website event. Turning website analytics off will stop future website collection and identifier forwarding and clear this website's analytics storage. It cannot recall a link already opened in the app or delete records already received. The app has separate measurement controls. Website consent does not grant app permission. App opt-out takes precedence.

Google analytics

When enabled on the production website, Google analytics sends visits, valid campaign labels and approved app-link selections on home, support, privacy and terms to Google Analytics after analytics acceptance. FAQ changes and related-product link measurement stay on the homepage. When cookieless entry measurement is enabled, Google also receives homepage visit and consent pings before you choose, with analytics and advertising storage denied. These are individual pings, not daily aggregate totals. They can include browser and network information and a temporary page-load number. We provide only known campaign labels from the current URL, exclude saved attribution and private URL values, and request no analytics cookie access before acceptance. Decline stops future Google collection, including cookieless pings. The banner explains which entry measurement is enabled. Google analytics stays disabled on the preview website.

After analytics acceptance, Google uses cookies to distinguish browsers and keep session state. The cookies _ga and _ga_WDLJ7PQ7GV apply only to this website, with path /. They use secure connections and the SameSite=Lax setting. We do not send Good Systems browser or session identifiers, account IDs or email addresses to Google. Page URLs exclude query strings and fragments. Referring links contain only their website origin.

The Ondera property uses event retention of 2 months and user retention of 14 months. New activity resets user retention. The cookies have a 90-day lifetime. A later consented visit renews this period. Your browser can shorten this lifetime. A cookie lifetime is different from a server retention period. A Google event retention period does not apply to all aggregated reports.

When you turn analytics off, we stop collection and clear the configured Google cookies and unsent website events. The page then reloads. This does not delete data that Google or Good Systems has already received.

Marketing

The Ondera website uses no advertising tags. The Google tag, when enabled, serves only Google Analytics. We do not use Google Ads, remarketing, X Ads or LinkedIn Insight Tag. There is no separate marketing consent category.

Your choices

Use Accept analytics or Decline in the banner to choose whether to allow analytics. You can change this later by opening Analytics settings in the website footer, changing the toggle and selecting Save. Closing the settings without saving leaves your choice unchanged.

Analytics cookies, persistent campaign attribution and interaction events require acceptance. Entry statistics may run before you choose, as described above. Decline stops future entry statistics too. When you turn analytics off, we stop both enabled providers, clear this website's analytics storage and configured Google cookies, and reload the page. Your choice has no time limit. If your browser cannot save a decline, analytics stays off in this tab. Other tabs may keep their own choice. You can also remove saved preferences and identifiers by clearing site data in your browser.

Changes and contact

If our use of browser storage changes, we will revise this policy and its update date. Questions about cookies or privacy can be sent to support@goodsystems.com.