Cookie Policy

Last updated · 12 October 2026

This Cookie Policy explains how OurAI ApS (“OurAI”, “we”) uses cookies and similar storage on this website and in the OurAI product. It is also available in Danish.

What cookies and similar storage are

A cookie is a small text file that a website stores in your browser. Local storage and session storage are similar: They keep small items in your browser, but the browser does not send them with each request. Danish law requires consent before a website stores or reads such information, unless it is strictly necessary to provide a service you have asked for. Everything described below is strictly necessary in that sense or is a choice you made yourself. We therefore ask for no consent and show no cookie banner.

The website

This website sets one cookie, and only when you ask for it. It loads no analytics, tracking pixels, advertising networks or third-party scripts that set cookies.

  • ourai.lang: Remembers the language you pick with the DA/EN switch, so the website, the app and the admin console open in that language. It is written only when you click the switch, is set for ourai.dk and its subdomains, lasts 12 months and identifies nobody. Until you choose, the site follows your browser’s language setting.
  • ourai.audience: Remembers your choice between For companies and For individuals, so the pages you visit next are written for you. It is kept in your browser’s local storage, which is not a cookie and is never sent to us. It is written only when you click the switch and identifies nobody.

Both are preferences you asked for, so they need no consent.

Signing in

Signing in happens on auth.ourai.dk, run by our sign-in service, which we host ourselves. It sets these cookies:

  • authentik_session: Holds the sign-in you have started together across its steps. It is set when you open the sign-in page, before you enter anything, and lasts until you close your browser.
  • authentik_csrf: Protects the sign-in forms against cross-site request forgery. It is set for ourai.dk and its subdomains, and lasts until you close your browser.
  • authentik_user_switching: Groups the sign-ins made in this browser, which the sign-in service needs to keep them apart. It is set when you sign in and lasts 12 hours.

They are needed for the sign-in you asked for.

The signed-in product

When you are signed in to the app or the admin console, we set:

  • __Host-olympus_refresh: Keeps you signed in. Only our server can read it, and your browser sends it only to the site that set it. It lasts 14 days from your last visit, is renewed each time you use OurAI and is deleted when you sign out.
  • olympus_oidc_state: Ties the reply from the sign-in service to the sign-in you started, so no one else can complete it. It is deleted after sign-in and lasts at most 10 minutes.
  • ourai.lang: The same language cookie as on the website, written when you pick a language in the product.

The product also keeps items in local storage and session storage. None is sent to us, and none identifies you:

  • Layout: Whether the sidebar and its sections are folded, and the order of your projects. Written when you change them.
  • Closed notices: So a notice you have closed stays closed in this browser.
  • Payments in progress: An operation number that stops a payment from being charged twice if the page reloads. Removed when the payment is complete.
  • In session storage, which your browser clears when you close the tab: The message you are writing until you send it, a note that the sign-in check has run, and the plan you chose before you are sent to payment.

Payments

Payment forms are loaded from Stripe, our payment processor, and only when you open one. Stripe then sets two cookies on our domain to detect card fraud:

  • __stripe_mid: Recognises your browser across payments. Lasts 1 year.
  • __stripe_sid: Links the steps of one payment. Lasts 30 minutes.

Stripe also sets cookies inside the payment form and can run a bot check there, for the same purpose. They are needed to process securely a payment you have asked for. Stripe describes them in its cookie policy.

What we do not use

We use no analytics, advertising or social-media cookies. Apart from Stripe’s fraud cookies during a payment, no third party sets cookies on the website or in the product. The error reports a failing page sends to Sentry store nothing in your browser and carry no cookie. The Privacy Policy describes what a report contains.

Self-hosted installations

If your organisation runs OurAI on its own servers, the cookies above are set by its own installation, not by OurAI.

Managing cookies

You can clear or block cookies at any time in your browser settings. If you block the strictly necessary cookies listed above, you are signed out and the product does not work.

Changes

If we add a cookie that is not strictly necessary, we update this policy first and ask for your consent before setting it.

Contact

Questions about cookies or this policy: support@ourai.dk.