Last Updated: August 20, 2026
This Cookie Policy explains how Open Mind Archives LLC ("Company," "we," "us," or "our") uses cookies and similar technologies on the TransactionFlow product of Nalepa Labs™ platform ("Platform," "Service") accessible at omtransactionflow.com. This policy should be read in conjunction with our Privacy Policy.
Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. Cookies are widely used to make websites work more efficiently and to provide information to website operators. They allow a website to recognize your device and remember certain information about your session or preferences.
Cookies set by the website operator (in this case, us) are called "first-party cookies." Cookies set by parties other than the website operator are called "third-party cookies."
Our Platform uses a minimal set of cookies. We prioritize your privacy and use only cookies that are strictly necessary for the operation of the Service or that provide essential functionality you have requested.
These cookies are essential for the Platform to function. They cannot be switched off in our systems. They are set in response to actions you take which amount to a request for services, such as logging in, filling in forms, or setting your privacy preferences. You can set your browser to block or alert you about these cookies, but some parts of the Platform will not function without them.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
sessionid |
Maintains your authenticated session after you log in. This cookie is essential for the Platform to identify you as a logged-in user and provide access to your account and financial data. Without this cookie, you would need to log in on every page. | Session (expires when you close your browser) or up to 2 weeks if you select "Remember Me" | First-party, Secure, HttpOnly |
csrftoken |
Provides Cross-Site Request Forgery (CSRF) protection. This is a security cookie that ensures form submissions originate from our Platform and prevents malicious websites from submitting forms on your behalf. This is critical for protecting your financial data from unauthorized modifications. | 1 year | First-party, Secure |
open_mind_transac_language |
Stores your selected language preference so that the Platform displays content in your preferred language across page loads. | 1 year | First-party |
In addition to cookies, we use browser local storage for the following purpose:
| Key | Purpose | Duration |
|---|---|---|
theme |
Stores your dark mode / light mode / system theme preference so the Platform displays in your chosen visual mode. | Persistent until cleared |
tf_cookie_consent_v1 |
Records your cookie preferences (which categories you have accepted) so we can honor your choice and avoid asking again on every visit. Storing this preference locally means it is not itself a cookie. | Persistent until cleared |
tf_ads_consent |
Mirrors your Advertising choice ("1" or "0") so our servers can honor it — no Pinterest or Reddit conversion is ever reported unless this says you opted in. Contains no identifier and is set when you save your cookie preferences. | 180 days |
When you visit our subscription or checkout pages, Stripe (our payment processor) may set cookies on your device as part of their fraud prevention and payment processing systems. These cookies are set by Stripe and are subject to Stripe's Privacy Policy. We do not control these cookies, but they are essential for processing your payments securely.
Stripe may set cookies including but not limited to:
__stripe_mid — Stripe fraud prevention identifier__stripe_sid — Stripe session identifier for payment processingWe advertise on Pinterest and Reddit. To measure whether those ads bring people to the Platform, we use the Pinterest Tag, provided by Pinterest, Inc., and the Reddit Pixel, provided by Reddit, Inc. Both are switched off by default and are only loaded after you turn on the Advertising category in our cookie settings. Until you do, no Pinterest or Reddit code runs on the Platform and no Pinterest or Reddit cookies are set.
When enabled, the Pinterest Tag may set cookies including but not limited to:
_epik — identifies a visit that came from a Pinterest ad (first-party, up to 1 year)_derived_epik — derived from _epik for the same purpose_pin_unauth — Pinterest visitor identifier for non-Pinterest users_pinterest_ct_ua, _pinterest_sess — Pinterest's own cookies on pinterest.com used to match conversions to ad clicksWith the same consent, when you sign up or purchase a subscription our servers also report that event to Pinterest together with a hashed (SHA-256) version of your email address, a hashed account identifier, your IP address, your browser's user-agent string and the address of the page you were on, so the conversion can be matched to the ad you clicked. While you are signed in with Advertising on, the Pinterest Tag also receives your email address on each page view and hashes it in your browser before it is sent (Pinterest's "enhanced match"). Pinterest cannot read the email from the hash. We never send Pinterest your financial data, documents, or anything about your clients. See Pinterest's Privacy Policy and our Privacy Policy, Section 8.4.
When enabled, the Reddit Pixel may set cookies including but not limited to:
_rdt_uuid — Reddit visitor identifier used to match conversions to ad clicks (first-party, up to 90 days)_rdt_cid — identifies a visit that came from a Reddit adWith the same consent, when you sign up or purchase a subscription our servers also report that event to Reddit together with a hashed (SHA-256) version of your email address, a hashed account identifier, a hashed version of your IP address and your browser's user-agent string, so the conversion can be matched to the ad you clicked. While you are signed in with Advertising on, the Reddit Pixel also receives your email address on each page view and hashes it in your browser before it is sent (Reddit's "advanced matching"). Reddit cannot read the email from the hash. We never send Reddit your financial data, documents, or anything about your clients. See Reddit's Privacy Policy and our Privacy Policy, Section 8.4.
We do not use any other advertising, retargeting, social-media tracking (Facebook Pixel, LinkedIn Insight Tag, etc.), cross-site behavioral analytics, or third-party profiling cookies.
On our public marketing and blog pages we run Harbor AI, provided by Harbor SEO, which keeps page titles, descriptions and structured data current for search engines and AI answer engines. When one of those pages loads, the address of that page is sent to Harbor so it can return the metadata for it. The address of the site that referred you is sent only when you arrive from a known AI assistant (for example ChatGPT, Perplexity, Gemini or Claude), so we can see which AI answers cite us.
Harbor AI sets no cookies. It stores the metadata it returns in your browser's local storage for one hour, so the same page does not have to be looked up again, plus a short marker so one visit is not counted twice. It runs only while you are signed out and only on our public pages — it is never loaded inside the application, so no page you visit as a signed-in user, and nothing about you, your documents or your clients, is ever sent to Harbor. See Harbor's Privacy Policy.
Strictly necessary cookies (and the payment-processor cookies Stripe sets as part of a service you have requested) are exempt from the consent requirement under most cookie regulations, including the EU ePrivacy Directive (the "Cookie Law") and the UK PECR, because without them the service you have requested cannot be provided.
When you first visit the Platform, we display a cookie notice. It offers two optional categories, both switched off by default:
"Accept all" turns both on; "Reject non-essential" leaves both off; "Cookie settings" lets
you choose per category. You can change your mind at any time using the
"Cookie settings" link in the site footer — switching Advertising off
stops the Pinterest Tag and Reddit Pixel from loading on your next page view and stops any further
conversion reporting about you. Your choice is stored in your browser (local storage key
tf_cookie_consent_v1, kept until you clear site data, and the strictly
necessary cookie tf_ads_consent, which expires after 180 days); we also keep
a record of a signed-in user's choice for up to 180 days so our servers can honor it.
You can control and manage cookies through your browser settings. Most browsers allow you to:
Please note: If you block or delete the strictly necessary cookies used by our
Platform (particularly sessionid and csrftoken), you will not be
able to log in or use the Platform. The Platform requires these cookies to function.
To manage cookies in your browser, follow the instructions for your specific browser:
For more information about cookies and how to manage them, you can visit www.allaboutcookies.org.
Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want to have your online activity tracked. Because our Platform does not use tracking cookies or engage in cross-site tracking, a DNT signal does not change how our Platform operates. We do not track your activity across third-party websites regardless of your DNT settings.
We may update this Cookie Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the updated Cookie Policy on this page with a revised "Last Updated" date. If we introduce non-essential cookies, we will provide prominent notice and obtain consent as required by applicable law.
If you have any questions about our use of cookies, please contact us: