In short
OnlyWAM does not use advertising cookies or trackers. We only store on your device what the site needs. YouTube videos only load if you allow them.
What we store without asking
Cookies and storage without which a service you asked for does not work: sign-in, language, cart, security, your settings and the app features. Under Regulation 5(5) of S.I. No. 336/2011 this needs no consent. The list is below.
| Name | Purpose | How long |
|---|---|---|
| sb-…-auth-token | keeps you signed in | until you sign out, 400 days at most |
| sb-…-code-verifier | secures sign-in with Google or X | until sign-in is complete |
| ow_consent | your cookie choice | 6 months |
| locale | your language | 365 days |
| dl_… | counts a download only once | 1 hour |
| social_oauth_… | connects X or Instagram in the Social Planner | 10 minutes |
| blocked_notice | shows you why your account is suspended | 30 minutes |
| owam_bypass, ow_impersonat…, ow_admin_session_backup | maintenance and support view of our team | 12 or 4 hours |
| Browser storage (onlywam-theme, onlywam-cart, ow-video-volume, ow-pwa-…, ow-push-optout, dismissed notices, drafts, 18+ confirmation) | your settings, your cart, your drafts | until you delete it |
| ow-like-nudge:… | only remembers that you turned off the request for a like | until you delete the storage |
| IndexedDB onlywam-upload-jobs | resume uploads you started | until the upload is done |
| Service worker and cache (onlywam-v7, ow-flags) | app on your home screen, offline page, showing push notifications | until the next version |
| Push subscription in your browser | push notifications when you switch them on (delivered through your browser's push service: Apple, Google, Mozilla or Microsoft) | until you switch push off or withdraw permission |
| Playback position in the Bunny player (stories, trailers) | remembers on your device where you stopped; according to BunnyWay d.o.o. the player sets no cookies | 7 days |
Services that are technically needed to show content and set no cookies (processors): Vercel Inc. (hosting, USA, Data Privacy Framework), Supabase Inc. (database, servers in Frankfurt, company in the USA, standard contractual clauses), BunnyWay d.o.o. (images and videos, Slovenia), DigitalOcean LLC (older media, servers in Amsterdam, Data Privacy Framework), Backblaze Inc. (protected files, servers in the EU, Data Privacy Framework).
What only loads with your permission
External media: YouTube videos in posts. Without permission the player stays off; you can still load a single video with one click. We fetch the preview image through our server, your device only connects to YouTube when you play. The legal basis is your consent (Regulation 5(3) of S.I. No. 336/2011, Art. 6(1)(a) GDPR).
| Provider | What | Third country | Duration |
|---|---|---|---|
| Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 (YouTube) | Player from www.youtube-nocookie.com; YouTube may set its own cookies and storage after the video starts | Transfer to Google LLC, USA (Data Privacy Framework) | according to Google |
Changing your choice
Under “Cookie settings” at the bottom of every page and in your settings you can switch each category on or off at any time. Withdrawal applies from then on. We keep your choice for six months in the cookie ow_consent, then ask again. As proof we log your choice with a random ID, time, version and categories, without your IP address and without any link to your account, and delete the log after 24 months. You can also delete cookies and storage in your browser.
Controller
Remotion Digital Ltd., Clifton House, Suite 33, Fitzwilliam Street Lower, Dublin 2, D02 XT91, Ireland. More in the privacy policy.
Last updated: October 2026.