Cookie and Browser Storage Policy
Last updated: October 10, 2026
OptimalCardSetup uses minimal browser storage to operate. We do not set first-party advertising or tracking cookies. This page explains the browser storage and limited cookieless measurement used by the Service.
Local Storage Used by the App
Authentication tokens
Access and refresh tokens are stored in localStorage to keep you signed in between visits. They are sent to the API for authentication and are removed when you sign out. Do not use a shared browser for a sensitive account.
Theme and interface state
The light/dark theme preference and small interface or redirect state are stored in localStorage, not a cookie. This storage does not contain payment-card or bank credentials.
Optimizer inputs and last result
Your optimizer inputs and settings are kept in your browser's session storage so a refresh does not lose them. The net value of your most recent result, with its card limit and points-or-cash mode, is kept in local storage so the pricing page can show your own number. Neither is sent to us until you run or save a scenario, and both are cleared when you sign out.
Short-lived handoff entries
Session storage also carries a few entries across a page change or sign-in: the page to return to after signing in, a scenario you chose to load or to save after signing in, credit values you set on a card page and carry to the optimizer, and the plan you picked on the pricing page before signing in. Each is removed once it is used. The sign-in return page and pricing choice are ignored after ten minutes and the card-page handoff after thirty, and session storage is cleared when you close the tab. Unused scenario and card-page drafts are also cleared when you sign out.
Strictly Necessary OAuth Cookie
If you start a Google or Microsoft sign-in, the API sets a short-lived, secure, HttpOnly, SameSite cookie containing a random browser-bound state value. It is used to prevent forged sign-in callbacks, expires after about 10 minutes, and is cleared when the callback completes. It is not used for advertising or analytics.
Cloudflare Security Cookie
Cloudflare, which delivers this site, may set a cookie named cf_clearance to recognize browsers that passed its bot-detection check. It is not used for advertising or analytics, and it can remain for up to about a year. Whether your browser receives it is Cloudflare's decision, and it is governed by Cloudflare's policies.
Limited Cookieless Measurement
The app records limited cookieless page-view, feature-event, and selected performance metrics as daily aggregates. It is intended for product reliability and improvement, not cross-site advertising or user-level ad profiles. Page-load timing is also measured by Cloudflare Web Analytics, which does not use cookies. Error monitoring through Sentry receives a session notice for each page view (a random session identifier, the site version, and your browser's user-agent string) and, when an error occurs, a technical report after configured scrubbing removes user identifiers, credentials, request bodies, cookies, query strings, and other sensitive fields. Our servers also send Sentry scrubbed timing data for a sample of requests. See the Privacy Policy.
Affiliate and Provider Cookies
When you follow an application link, the destination card issuer or affiliate network may set cookies to attribute the referral. Stripe, Google, Microsoft, Cloudflare, or other providers may also use their own cookies during direct checkout, OAuth, or service interactions. Those cookies are governed by the provider's policies, not this site, and we do not control their contents.
Managing Browser Storage
Use your browser settings to clear cookies and localStorage for optimalcardsetup.com. Clearing localStorage signs you out and resets the theme preference; signing out removes authentication tokens. Blocking third-party cookies generally does not affect the core Service, but a provider may require its own storage during a direct checkout or OAuth interaction.
Contact
Questions or accessibility feedback are welcome at support@optimalcardsetup.com. We do not represent that the site conforms to any particular accessibility standard.