This Cookie Policy forms part of the OnChainMake legal suite. Read it alongside the Privacy and Data Policy and the Terms and Conditions. In the event of any conflict between this policy and the Privacy Policy on data handling matters, the Privacy Policy prevails.
Cookies are small text files that a website places on your device when you visit. They are widely used to make websites function properly, to remember your preferences, and to provide information to the site owner about how the site is being used.
This policy covers cookies and similar tracking technologies including web beacons, pixel tags, and local storage objects. Cookies are set either by the website you are visiting (first-party cookies) or by third-party services such as CRM tools (third-party cookies). Some cookies are deleted when you close your browser (session cookies). Others remain on your device for a set period or until you delete them (persistent cookies).
Validation Phase (Phase 0 and 0.1): We use cookies to operate the website, manage your session if you create a test account, and understand how visitors interact with the site so we can improve it before commercial launch. HubSpot tracking cookies are active from the moment the website is live.
Commercial Phase (Phase 0.2 onwards): Additional functionality cookies will be required to support the platform, including maintaining your logged-in session, remembering your wallet connection preferences, and supporting the escrow workflow. This policy will be updated before any new cookies are introduced.
These cookies are essential for the website to function. They cannot be switched off and do not require your consent.
| Cookie | Set By | Purpose | Duration |
|---|---|---|---|
| __cf_bm | Cloudflare | Bot detection and security — distinguishes human visitors from automated traffic | 30 minutes |
| JSESSIONID / session_id | OnChainMake platform | Maintains your logged-in session. Without this cookie you would be logged out on every page. | Session (deleted on browser close) |
| csrf_token | OnChainMake platform | Prevents cross-site request forgery attacks | Session |
| Cookie | Set By | Purpose | Duration |
|---|---|---|---|
| ocm_cookie_consent | OnChainMake | Stores your cookie consent preferences and the timestamp of that decision so we do not ask you again on subsequent visits | 12 months |
| ocm_theme | OnChainMake platform | Remembers your display preferences such as language or interface settings | 12 months |
As of the effective date of this policy, OnChainMake does not use Google Analytics or any third-party web analytics platform. If an analytics tool is introduced, this policy will be updated before activation and you will be notified.
OnChainMake uses HubSpot as its CRM platform. When the HubSpot tracking script is loaded on onchainmake.com, HubSpot sets the following cookies. These are third-party cookies set by HubSpot Inc. (a US company). They track visitor behaviour across the website and link it to a visitor profile in the HubSpot CRM. Unlike strictly necessary cookies, HubSpot’s tracking cookies identify you as an individual visitor across sessions. Under CCPA, California residents have the right to opt out of this type of tracking. A cookie consent banner is required before the HubSpot tracking script fires.
| Cookie | Purpose | Duration |
|---|---|---|
| hubspotutk | A unique identifier that tracks a visitor across sessions and associates website activity with your contact record in the OnChainMake HubSpot CRM if you submit a form or complete the survey | 13 months |
| __hssrc | Set whenever HubSpot detects a new session has started | Session |
| __hssc | Session tracking — tracks the time between page views within a session | 30 minutes |
| __hstc | The main HubSpot tracking cookie. Tracks the visitor journey: pages visited, visit frequency, and traffic source. Linked to hubspotutk to build a visitor profile in the CRM. | 13 months |
| hs_ab_test | Tracks membership in A/B tests run through HubSpot. Only set if HubSpot A/B testing features are active. | Session |
| hs-messages-* | Set if HubSpot live chat is active on the site. Only set if this feature is enabled. | 13 months |
For full information on HubSpot’s cookie use, see their Privacy Policy and Cookie Policy.
When you visit onchainmake.com for the first time, a cookie consent banner will appear. You can accept all cookies, reject non-essential cookies, or manage preferences individually. Your choice is stored in the ocm_cookie_consent cookie for 12 months. You can change your preference at any time using the cookie settings link in the website footer.
The website will still function. The public website and survey will work normally. If you create a platform account, session and security cookies will still be set as they are strictly necessary. HubSpot will not track your visit. We will not be able to measure how visitors find and use the site.
| Browser | Where to Find Cookie Settings |
|---|---|
| Google Chrome | Settings > Privacy and security > Cookies and other site data |
| Mozilla Firefox | Settings > Privacy & Security > Cookies and Site Data |
| Apple Safari (Mac) | Preferences > Privacy > Manage Website Data |
| Apple Safari (iOS) | Settings > Safari > Privacy & Security |
| Microsoft Edge | Settings > Cookies and site permissions > Cookies and site data |
To opt out of HubSpot’s tracking specifically, visit hubspot.com/privacy-policy/do-not-track. This sets a browser-level opt-out that prevents HubSpot cookies from being set by any website using HubSpot tracking.
OnChainMake does not sell personal information. However, HubSpot tracking cookies may constitute a “sharing” of data under CCPA. To exercise your opt-out right: use the cookie consent banner to reject non-essential cookies, click the cookie settings link in the footer at any time, or email [CONTACT EMAIL] with the subject line: CCPA Cookie Opt-Out.
| Third Party | Cookie Type | Their Policy |
|---|---|---|
| HubSpot Inc. | CRM tracking and analytics | legal.hubspot.com/privacy-policy |
| Cloudflare (if active) | Security / bot detection | cloudflare.com/privacypolicy |
The OnChainMake website may contain links to third-party websites. Once you leave onchainmake.com, this Cookie Policy no longer applies. We are not responsible for the cookie practices of other websites.
When you connect a cryptocurrency wallet to the OnChainMake platform, certain data may be stored in your browser’s local storage rather than in cookies. Local storage is similar to cookies but persists until explicitly cleared.
| Storage Item | Technology | Purpose | Duration |
|---|---|---|---|
| Wallet connection preference | Browser localStorage | Remembers which wallet provider you connected so you are not prompted to reconnect on each visit. Does not store your private key or wallet credentials. | Until you disconnect your wallet or clear browser data |
| Last connected wallet address | Browser localStorage | Stores your wallet address (a public blockchain identifier) to pre-fill the connection prompt | Until you disconnect or clear browser data |
| Transaction confirmation state | Browser sessionStorage | Temporarily holds the state of a pending escrow transaction between page interactions | Session only |
OnChainMake does not and cannot access your wallet’s private keys. Private key management is handled entirely by your wallet software (MetaMask, WalletConnect, or similar). OnChainMake only receives your public wallet address when you initiate a connection.
We may update this policy when we add a new third-party tool that sets cookies, when a tool we already use changes its cookie behaviour, when we expand the platform in Phase 0.2+, or when applicable law changes. For material changes — any change that introduces new non-essential cookies or new third-party tracking — we will notify registered Users by email at least 14 days before the change takes effect. The current version is always available at onchainmake.com/cookies.
For any questions about cookies or this policy, email info@onchainmake.com — response within 5 business days. California residents may email [CONTACT EMAIL] with the subject line: California Privacy Request. We will respond within 45 days as required by the CCPA.
For data rights requests (access, correction, deletion, portability), see Section 6 of the Privacy and Data Policy.