Cookie Policy
Last updated: 13 September 2026
This page lists every cookie OpenGiving sets, and the other things we keep in your browser that do a similar job. It covers the website at opengiving.us. Our iOS and Android apps are described separately at the end.
The short version
- We set four cookies, and you will normally have fewer. One keeps you signed in, one carries the language the page is being served in, one remembers that you dismissed a banner, and one remembers your cookie choices.
- We use no advertising cookies, no ad networks, and nothing that follows you onto other websites. We do not sell or rent your data.
- We do count page views, without cookies. In Europe and Brazil we ask first; everywhere else you can turn it off whenever you like.
Cookies we set
| Name | What it does | How long it lasts | Category |
|---|---|---|---|
| sb-…-auth-token | Keeps you signed in. Holds your session so you do not have to log in again on every page. Set only after you sign in, and cleared when you sign out.The full name includes our authentication provider's project identifier, and the value may be split across two cookies ending in .0 and .1 when it is too large for one. | Until you sign out, or the session expires | Strictly necessary |
| og_consent | Remembers the choice you made about the two optional things below, so we do not ask again and so your answer is actually applied. Records what you chose and when.This one is set whether you accept or decline — a refusal has to be remembered too, or the banner would return on every page and nothing would honour your no. | 6 months, then we ask again | Strictly necessary |
| NEXT_LOCALE | Carries which language the site is serving you, so pages keep rendering in it. It is set by the routing when the language shown differs from the one your browser asked for — including when you simply open a link someone sent you. | Until you close your browser | Preference |
| app-launch-banner-dismissed | Remembers that you closed the bar suggesting our mobile app, so it does not come back every time you visit.Set only if you actually dismiss that bar. | 1 year | Preference |
Not cookies, but the same idea
A few things are kept in your browser's own storage rather than in a cookie. They stay on your device and are not sent to us automatically.
- opengiving_cart — the contents of your shopping cart, so it survives a page reload.
- A handful of “you already dismissed this” flags, so a banner or prompt you closed does not keep coming back. Some last until you clear your browser data, some only until you close the tab. They record only that you closed something.
Clearing your browser's site data removes both.
Referral links
If you open a link with a referral code in it, we ask before recording anything. Say yes and the click is recorded on our server — your browser, the page you landed on and a hash of your IP address — so the person who shared it gets credit. Say no and nothing is recorded. No cookie is involved either way: we removed the one that used to be set here, because nothing ever read it.
How we measure use of the site
We use Vercel Web Analytics and Vercel Speed Insights to count page views and measure how quickly pages load. Both are served from our own domain, and neither sets a cookie or stores anything in your browser.
They report aggregate figures — which pages were visited, how fast they loaded — and do not follow you across other websites or build an advertising profile.
When you pay, and when you sign in with Google or Apple
Payment is handled by our payment provider, currently PayPal. When you reach a payment step their script loads and they set their own cookies, mainly to detect fraud and to complete the payment. Those cookies are theirs, not ours, and are governed by their privacy policy.
Signing in with Google or Apple works the same way: the sign-in page belongs to them and uses their cookies.
The mobile apps
The iOS and Android apps do not use cookies for OpenGiving itself. Your session is stored securely on your device instead.
The apps do open a web page for payment and for some sign-in methods. Those pages belong to PayPal, Google or Apple and use their cookies, exactly as they would in a browser.
What we do not do
- No advertising or marketing cookies, and no ad networks.
- No tracking of you across other websites.
- No selling or renting of personal information.
Your choices
Every browser lets you see, block and delete cookies in its settings. Blocking cookies for this site is your right, with one practical consequence worth knowing: the sign-in cookie is what keeps you logged in, so blocking it means you cannot stay signed in.
The other three are safe to block. The site will open in its default language, the app bar may reappear, and the cookie banner will ask again on every page.
Changes to this policy
If we add a cookie, or start using a tool that sets one, we will update this page and change the date at the top before the change goes live.
Questions
If anything here is unclear, or you want to know more about what we store, write to us.
privacy@opengiving.usChange your cookie choices
See also: Privacy Policy · Terms of Service