Legal
Cookies and storage
Last updated 2026-10-17
This page lists everything this site stores in your browser and every other company whose servers a page can load content from. It is generated from the same list the code is checked against, so nothing is stored that is not listed here.
There are no analytics, advertising or tracking cookies, no tracking pixels and no profiling. The fonts are served from this site. The only thing we ask about is content from other companies: editorial photos and embedded videos.
Strictly necessary
Sign-in, security and your answer about photos and videos. Without these the site cannot work as you asked.
Legal basis: § 25(2) no. 2 TDDDG (no consent needed); for any personal data, Art. 6(1)(b) and (f) GDPR.
| Name | Kind | Set by / receives | How long | Why |
|---|---|---|---|---|
osdc-session | Cookie | This site | 12 hours, or until you sign out | Keeps you signed in to the app; signed, cannot be read by page scripts (httpOnly). |
osdc-r-<slug> | Cookie | This site | 14 days | Remembers that you entered the passphrase of a client report, for that report only. |
site-consent | Local storage | This site | Until you clear it (or the page’s own reset) | Your answer about photos and videos, with the date and the version of the question. |
What you are working on
A copy of what you enter on a page — a self-assessment, a sizing, an intake — kept in your own browser so it is not lost when you reload or come back. It never leaves your browser unless you send it.
Legal basis: § 25(2) no. 2 TDDDG — strictly necessary for a function you asked for; nothing is read by us.
| Name | Kind | Set by / receives | How long | Why |
|---|---|---|---|---|
ai-transformation-self-assessment | Local storage | This site | Until you clear it (or the page’s own reset) | Your answers to the self-assessment, so you can carry them into the Diagnostic. |
osdc-scan | Local storage | This site | Until you clear it (or the page’s own reset) | What you entered in the Scan intake. |
osdc-industry-<module> | Local storage | This site | Until you clear it (or the page’s own reset) | What you entered in an industry Scan. |
osdc-sizer | Local storage | This site | Until you clear it (or the page’s own reset) | Your table and levers in the operations sizer. |
osdc-portfolio | Local storage | This site | Until you clear it (or the page’s own reset) | The use cases you entered in the portfolio view. |
osdc-casestudy | Local storage | This site | Until you clear it (or the page’s own reset) | Your table and levers in the solution-design case study. |
osdc-laws | Local storage | This site | Until you clear it (or the page’s own reset) | Your settings for the sizing laws. |
osdc-scan-handoff osdc-sizer-handoff osdc-orgscan-handoff | Local storage | This site | Until you clear it (or the page’s own reset) | A one-off hand-over from a public tool into a quote or a role scan; replaced on the next hand-over. |
ai-transformation-engine | Local storage | This site | Until you clear it (or the page’s own reset) | This browser’s working copy of an engagement record (the shared record is on the server). |
osdc-control-plane | Local storage | This site | Until you clear it (or the page’s own reset) | This browser’s working copy of a solution design. |
osdc-role-checks | Local storage | This site | Until you clear it (or the page’s own reset) | The checklist items you ticked in the role brain — a reminder, not a record. |
osdc-tutor-dock osdc-story-mode | Local storage | This site | Until you clear it (or the page’s own reset) | Whether the tutor is open and read-aloud on, and whether story mode is on. |
osdc-voice-client | Session storage | This site | Until you close the tab | Identifies this tab to the local voice gateway, when one is configured. |
Photos and videos from other companies (only with your consent)
Editorial photos from Unsplash and embedded videos from YouTube or Kommodo load from those companies’ servers, which receive your IP address and browser details. Until you allow it, pages show no photo, and each video waits for you to press “Load this video”.
Legal basis: your consent, § 25(1) TDDDG and Art. 6(1)(a) GDPR; you can withdraw it any time with “Cookie settings” at the foot of every page. Unsplash and Google are in the USA (transfer: see the privacy notice).
| Name | Kind | Set by / receives | How long | Why |
|---|---|---|---|---|
images.unsplash.com | Content from another server | Unsplash Inc. (USA) | Each time a page loads it | Editorial photos in page headers and beside pages. |
www.youtube-nocookie.com | Content from another server | Google Ireland Ltd. / Google LLC (USA) | Set by YouTube when you play a video; YouTube’s own terms | Videos on the insurance case pages. |
kommodo.ai | Content from another server | Kommodo | Each time a page loads it | A screen recording on the case study. |
Services you start yourself
Dictation (the microphone at the edge of a text field) uses your browser’s own speech recognition. In some browsers — Chrome, for example — that sends the audio to the browser maker’s servers. It starts only when you press the microphone; we receive only the text.
Clearing it
You can delete everything listed here at any time in your browser’s settings (site data for this address). Signing out removes the session cookie at once.