How we use cookies.

1. What cookies are

A cookie is a small text file that a website asks your browser to store. It lets the site recognize your browser on later visits — to keep you signed in, remember a preference, or count a page view.

This policy uses "cookies" as shorthand for several similar technologies, including local storage, session storage, and pixel tags. They serve the same purpose for our discussion: storing or reading a small piece of information from your device.

2. Categories we use

OnePointe groups cookies into four categories. The first is on by default and required for the site to function. The other three are off by default and require your opt-in consent.

3. Third parties

The marketing site loads scripts and content from a small number of third parties. We list them here for transparency:

• Plausible Analytics — analytics, only when you opt in to the Analytics category. Plausible data policy.
• LinkedIn & X — embedded posts, only when you opt in to the Social media category.
• Google Fonts — typography. Served from Google's CDN; no cookies are set, but your IP address is exposed to Google as part of the request. We are evaluating self-hosting to remove this dependency.

We do not load Google Analytics, Meta Pixel, advertising trackers, session-replay scripts, or third-party chat widgets on this site.

4. Your choices

You have several ways to control cookies on onepointe.ai:

• Our cookie banner — appears on first visit. Choose "Reject all" to keep only Essential cookies, "Accept all" to enable everything, or "Customize" to pick categories.
• The footer link — "Cookie preferences" in the site footer reopens the same controls at any time.
• Global Privacy Control — if your browser sends a GPC signal, we automatically reject the optional categories before you interact with the banner. We display a notice when GPC has been honored.
• Your browser settings — you can block or delete cookies in your browser at any time. Doing so may sign you out and reset your preferences.

5. In the application

The case-management application your Institution licenses runs at a per-tenant URL (for example, linwood.onepointe.ai) and uses only the cookies necessary to keep you signed in and the session secure:

• Session token — issued at sign-in, expires after the configured idle window (institution-controlled, default 30 minutes), encrypted, HTTP-only, SameSite=Strict.
• Anti-CSRF token — protects authenticated requests from cross-site forgery.
• Multi-factor state — short-lived, used only during the MFA challenge.

The application contains no analytics, marketing, or social-media cookies. Subject case data is never used to train models or shared with any third party — see our Privacy Policy.

6. Updates to this policy

If we add a new cookie or third party in a category that requires consent, we will:

• Update this page with the change and a new effective date;
• Re-prompt the cookie banner so you can review your choices before the new technology runs;
• Notify Institution administrators by email if the change materially affects how Institution traffic is processed.

Minor edits — clarifying language, fixing a typo, updating contact info — do not trigger a re-prompt.

7. Questions

For questions about this Cookie Policy or to exercise rights related to cookies and similar technologies on our site:

• Privacy inquiries: privacy@onepointe.ai
• General contact: hello@onepointe.ai
• Mailing address: OnePointe Technologies, Inc., 830 NE Holladay St, Portland, OR 97232

This page is referenced from our Privacy Policy and from the cookie banner shown on first visit.