Cookies and site data

Signing in needs your browser to remember that you're signed in. Omxus uses as little browser storage as it can, and nothing for tracking or advertising.

On the Omxus sign-in page

When you sign in on auth.omxus.com, it saves one cookie so the next site can offer Choose an account. The cookie:

• is only readable by auth.omxus.com, and not by scripts on the page,
• is only sent over secure connections,
• lasts up to 30 days, and ends when you sign out, change your password, or sign out everywhere.

On a site with the sign-in on its own page

The site saves your sign-in in its own browser storage, under the site's address. It holds the short-lived sign-in key and the key that renews it. Signing out removes them.

Things that can load on the sign-in screen

• Fonts. The sign-in screen can load its typeface from Google Fonts, which receives your browser's network address when it does.
• The breach check. When you choose a new password, your browser asks Have I Been Pwned about a small part of a scrambled fingerprint. Learn more.

If site data is blocked

If your browser blocks cookies or site data, you may be signed out every time you reload. Allow site data for the site you're using, and for auth.omxus.com if the site sends you there.