Onfly

Cookie Policy

Effective date: 27 July 2026. Version 1.0.

1. What cookies are

Cookies are small files stored on your browser or device.

Similar technologies may store identifiers, remember preferences, protect payments or measure how a website is used.

2. Categories

Strictly necessary

These technologies are required to:

  • operate the website and brief;

  • protect against fraud and abuse;

  • remember privacy preferences;

  • process payments;

  • maintain security.

They cannot normally be disabled through our cookie controls.

Analytics

With your permission, analytics technologies help us understand:

  • how visitors find Onfly;

  • which pages they use;

  • where users leave the brief;

  • whether technical problems occur;

  • whether the service is performing effectively.

Analytics may include session replays and heatmaps that record page interactions. Text entered into form fields is masked and is not captured in session recordings.

Analytics may be provided by Google Analytics, PostHog, Hotjar or another provider shown in the cookie settings.

Functional

Functional technologies may remember optional settings and improve convenience.

Marketing

Onfly does not currently use marketing or advertising cookies unless they are shown in the cookie settings and you provide consent.

3. Cookies currently used

  • Onfly consent manager — remembers cookie choices. Necessary. Typical duration: 6 months.

  • Stripe — payment security and fraud prevention. Necessary. Session or provider-defined.

  • Cloudflare — security and bot protection. Necessary. According to configuration.

  • Framer — website delivery and technical operation. Necessary/functional. According to configuration.

  • Google Tag Manager — loads and manages other tags according to your consent choices. Necessary for tag control; sets no tracking cookies of its own.

  • Google Analytics — traffic and usage measurement. Analytics. Up to 24 months.

  • PostHog — product analytics and brief funnel. Analytics. According to configuration.

  • Hotjar — session replays and heatmaps, with form inputs masked. Analytics. Up to 12 months.

Cookie details are reviewed periodically against the production configuration. Tools shown in the cookie settings reflect the current setup.

4. Consent

Non-essential analytics, functional or marketing technologies are not activated until you provide consent where consent is legally required.

You can reject non-essential cookies without losing access to the main website and brief.

Strictly necessary technologies generally do not require consent, while analytics cookies normally require prior consent under EU and UK rules.

5. Changing your choices

You may change or withdraw your consent at any time through the Cookie Settings link in the website footer.

You may also delete stored cookies through your browser settings.

6. Third-party checkout

When you proceed to Stripe Checkout, Stripe may use cookies and similar technologies for payment processing, security and fraud prevention.

Stripe controls the technologies used on its own checkout pages.

7. Updates

We may update this Cookie Policy when technologies or providers change.

The current version will be published on this page with its effective date.

8. Contact

Questions about cookies may be sent to: hello@onfly.design