Cookie Policy
Last updated: September 8, 2026
1. What this policy covers
This Cookie Policy explains how On The Fish uses cookies, local storage, session storage, and similar browser technologies on our website. It should be read with our Privacy Policy and Terms of Service.
Our native iOS app does not use browser cookies. It may store authentication tokens, preferences, and cached data on your device as described in the Privacy Policy.
2. Categories of storage we use
- Strictly necessary (always on): authentication and session data, security checks, bot protection, routing state, affiliate referral attribution, and settings needed to keep the app working. These are set without consent because the service cannot run without them.
- Preference storage (always on): choices such as theme, whether to stay signed in, and local display preferences like media crop positions.
- Analytics (optional, off until you accept): PostHog product analytics, Google Analytics 4, and our own first-party visit analytics, which measure page views, feature usage, and errors.
- Advertising (optional, off until you accept): the Meta Pixel, which measures our advertising campaigns and allows On The Fish ads to be shown to you on Facebook and Instagram.
Analytics and advertising storage is only set after you accept it in our cookie banner. If you reject non-essential cookies, those scripts are not loaded and no analytics or advertising identifiers are created.
3. Why we use it
- To sign you in, keep your session secure, and honour your stay-signed-in choice.
- To remember app preferences and make the product easier to use.
- To protect the service against abuse, spam, bot signups, and excessive API usage.
- To help us diagnose blocking errors and reliability issues.
- To support subscriptions, checkout, fraud prevention, and billing management.
- To attribute a signup to an affiliate's referral code so commissions can be paid.
- With your consent, to measure how the website is used so we can improve it, and to measure and target our advertising.
4. Main cookies and storage keys
| Name | Category | Purpose | Retention |
|---|---|---|---|
| Supabase auth tokens | Strictly necessary | Keeps you signed in | Session or until sign-out |
otf_aff | Strictly necessary | Affiliate referral attribution | 60 days |
otf_cookie_consent | Strictly necessary | Remembers your cookie choice on www and app | 12 months |
ph_<project>_posthog | Analytics | PostHog visitor and session identifiers | 12 months |
_ga, _ga_* | Analytics | Google Analytics 4 visitor and session identifiers | Up to 2 years |
otf_tracking_* | Analytics | First-party visit and campaign attribution | Until you clear site data |
_fbp, _fbc | Advertising | Meta Pixel campaign measurement | Up to 90 days |
5. Third party cookies
Some third party providers may set cookies or use similar technologies when their services are loaded, including Supabase for authentication, Stripe for payments, Cloudflare Turnstile for bot protection, and any identity provider you use for OAuth sign in. With your consent we also load PostHog and Google Analytics 4 for analytics, and the Meta Pixel (Meta Platforms) for advertising measurement and retargeting. Their use of cookies is governed by their own policies. See PostHog's Privacy Policy, Google's Privacy Policy, and Meta's Privacy Policy.
6. Managing cookies and browser storage
You can change or withdraw your analytics and advertising choices at any time using in the footer of any page. Withdrawing consent stops further collection and clears the identifiers we can remove from your browser.
You can also block or delete cookies and local storage in your browser settings. If you do, some parts of On The Fish may stop working, including sign in, checkout, and saved preferences. You can also sign out or clear site data for `onthefish.app` from your browser.
7. Changes to this policy
We may update this policy as the app changes. The "Last updated" date above shows the latest revision.
8. Contact
Questions about cookies or browser storage? Email support@onthefish.app.
Codaro Pty Ltd
ABN 68 682 118 529 · ACN 682 118 529