Cookie notice
Effective date: September 24, 2026.
Technical cookies and optional analytics
Our public website at ohmyho.st and documentation at docs.ohmyho.st offer optional Google Analytics. We load Google's analytics code only after you choose Accept, or enable Analytics under Edit and save your preferences. Under Edit, you can switch Analytics off or choose Turn off all. Essential cookies cannot be switched off in these settings. Your choice is shared across these two hosts for up to 180 days. Use the cookie icon in the footer of either site to reopen Cookie settings, change your choice or withdraw consent; withdrawal stops collection and clears the Google Analytics cookies on these hosts. The old informational notice's OK button is not analytics consent.
The account portal at app.ohmyho.st and development environments do not use this analytics integration. Technical cookies support login, security, referral handling and requested functions such as roadmap votes. A referral label is retained for acquisition analysis as explained in the Privacy notice; it is not a cross-site visitor identifier.
| Technology | Purpose | Duration / scope |
|---|---|---|
| omh_referral | Remember the entry link’s r value and pass it to the login link and install command as signup attribution; no unique visitor identifier | Up to 30 days; first-party, Secure, HttpOnly, SameSite=Lax |
| omh_analytics | Remember your optional analytics choice; no visitor identifier | Up to 180 days; shared first-party preference for website and docs |
| _ga and _ga_C1PWJM238R | Google Analytics visitor and session measurement, only after consent | Up to 180 days after use; shared across website and docs |
| __Host-omh-session | Keep the authenticated account portal session, protect form actions and renew WorkOS access server-side | Up to seven days; encrypted and authenticated, host-only, Secure, HttpOnly, SameSite=Lax; cleared on logout or invalidation |
| __Host-omh-login | Protect the browser login handoff using state and PKCE | Up to ten minutes; Secure, HttpOnly, SameSite=Lax; cleared after the handoff |
| __Host-ohmyhost_dev_access | Authorise access to a protected customer Dev environment after its share link or an owner access link is opened; access is checked again on every request | Up to twelve hours; host-only, Secure, HttpOnly, SameSite=Lax |
| Authentication and security cookies used by WorkOS and the identity provider you sign in through it | Maintain the requested login and protect authentication | The login service's session/security expiry; only when that service is used |
| Cloudflare security cookies, where its protection requires them | Detect abusive traffic or remember a successfully completed security challenge | Expiry follows the enabled mechanism, described in Cloudflare’s cookie documentation |
| __Host-omh_voter | Restore your roadmap votes for this browser; the server stores only a hash of the random identifier, not a verified personal identity | Up to twelve months after use; host-only, Secure, HttpOnly, SameSite=Lax; not used for analytics, advertising or account access |
Documentation and separate provider pages
Our documentation at docs.ohmyho.st is hosted by Mintlify, which may use its own cookies and service telemetry for that service. Its delivery, search and assistant receive the requests you submit and use their own service infrastructure. The table includes our Google Analytics integration on website and docs; it does not classify every cookie used by Mintlify as technical. See Mintlify’s privacy notice for its processing. Our Google Analytics integration follows the consent choice above; it measures page views, engagement, outbound links and downloads without enabling advertising features or Google Signals.
The hosting CLI's locally stored credentials are not website cookies. Application-auth cookies in a customer's own application are controlled by that customer. Likewise, a separately opened GitHub, identity-provider or payment-provider page operates under that provider's own cookie notice; this notice does not classify those independent sites' cookies.
Your controls
You can remove or block cookies in your browser and clear site storage. Blocking a login, security or private-access cookie can prevent the function you requested from working. Removing the analytics preference displays the choice again. Rejecting analytics does not affect your ability to read the website or docs. Blocking the roadmap cookie prevents votes from being saved; deleting it disconnects this browser from its earlier votes until those records expire. Google Analytics is not enabled in the account portal.