YOUR PRIVACY
Cookie policy.
Choose whether this website uses optional analytics. You can browse, send an inquiry and go to checkout without accepting optional tracking.
Effective and last updated: October 13, 2026
What this policy covers
This policy explains cookies and similar technologies on the One Question website at onequestion.io, including our Community and Build With You pages. Read our privacy policy for information about inquiries and other personal information.
Cookies are small pieces of data stored by your browser. Similar technologies include browser storage and tracking pixels. A service can collect analytics without setting a cookie, so our privacy choice controls analytics and session replay as well as advertising cookies.
What we use
| Technology / provider | Purpose | Duration and choice |
|---|---|---|
oq_cookie_consentOne Question | A necessary first-party cookie remembers whether you accepted or rejected optional analytics, the policy version and your choice’s dates. It contains no visitor ID or contact details. | Up to 12 months, unless you change your choice or clear it. Set only when you save a choice. |
| Analytics and masked session replay PostHog | Counts visits, page exits, public-link and button clicks, inquiry/checkout actions and tool progress. With analytics permission, browser identifiers and campaign labels can link checkout to Stripe-confirmed Community registrations, first payments and renewals using opaque receipt identifiers and actual paid amounts. Also records masked sessions, click/scroll heatmaps, browser errors and page-speed metrics. Inputs, inquiry text and tool results are blocked from replay; click text and attributes are masked. Published campaign labels help us compare ad traffic; raw advertising click IDs are removed. Analytics requests include page information without URL query strings or fragments, referral information, device/browser information and event time. PostHog receives technical connection information when your browser connects. | Off until you accept analytics. No analytics cookies or PostHog person profiles. Browser identifiers and campaign context use sessionStorage in this tab until it closes; we clear this state on withdrawal. Separately, One Question can retain permitted checkout attribution for up to 90 days, as described below. Masked replays are retained for 30 days; analytics events may be retained on PostHog’s servers. |
| Website analytics Google Analytics 4 | Measures page visits, scrolls, public-link clicks and form interactions, plus Community views, checkout clicks, confirmed inquiry submissions and Stripe-confirmed Community registrations, first payments and renewals. With analytics permission, a browser identifier and campaign labels can connect checkout to its verified outcome. Google’s existing Enhanced measurement may also measure site search, video engagement and file-download interactions. Automatic form events describe an interaction or submit attempt; only a confirmed inquiry creates our generate_lead event. We send public page/referral paths and bounded campaign labels, browser/device and connection information, and event time. Contact details, inquiry answers and tool inputs/results are excluded. Google advertising signals and personalization are disabled. | Off until you accept analytics. First-party _ga and _ga_QCDH5BD5B7 cookies identify a browser and maintain session state for up to 12 months. We remove these cookies and stop the code when you withdraw. Google server retention is separate and depends on the property configuration. See Google’s privacy policy. |
| Hosting and inquiry forms Netlify | Delivers pages, protects the service and processes inquiries you choose to submit. Technical request information is needed to provide these functions. | Necessary service processing. Rejecting analytics does not prevent a requested inquiry. |
| Badge display preference Netlify | If you choose to hide the hosting badge, local browser storage remembers that display choice on this domain. The badge does not collect analytics or set tracking cookies. | Set only if you hide the badge. Remains until cleared or removed by your browser; it is not an analytics preference. |
| Advertising Meta Pixel and server measurement | Only with advertising permission, Meta can receive page visits, Community views, confirmed inquiries, Community registrations, first payments and renewals to measure Facebook and Instagram ads and support relevant ads across websites. Browser and ad-click identifiers and campaign labels can associate checkout with its Stripe-confirmed outcome, including opaque receipt identifiers and actual paid amounts. Contact details, inquiry answers, payment-card details and tool results are excluded. Browser and connection information may link these actions to a Meta account. The first-party _fbp cookie identifies a browser; _fbc may record a Meta ad click. Meta may also use cookies on its own domains. | Advertising is off until accepted separately or through Accept all optional. Meta browser cookies generally last up to three months and may be renewed. See Meta’s cookie policy for its own cookies. |
| Checkout-confirmation reference One Question | A random reference matches this browser’s checkout to its Stripe-confirmed result. It contains no contact or advertising identifiers and is separate from optional measurement. | Necessary for the checkout-confirmation service. sessionStorage in this tab for up to 24 hours, or until the tab closes. Optional tracking can stay off. |
| Checkout attempt and context result One Question | A random attempt and its stable confirmation reference, or an unavailable result, keep payment retries consistent. They contain no contact, analytics or advertising identifiers. | Necessary browser sessionStorage for this tab until it closes. Optional tracking can stay off. |
| Optional checkout attribution One Question | For the purpose you accept, links permitted browser or ad-click identifiers and campaign labels to Stripe-confirmed registration, payment and renewal outcomes. | Server records for up to 90 days. Analytics and advertising have independent permissions; withdrawing a purpose removes that purpose’s optional identifiers from linked records. |
| Optional withdrawal reference One Question | Remembers opaque references so Cookie preferences can withdraw a selected purpose from server tracking linked in this browser. Contains no contact, analytics or advertising identifiers and is not sent to those providers. | Created only after an optional purpose is accepted. Browser localStorage for up to 90 days. Other browsers and devices have separate choices. |
PostHog records only after analytics permission. We block inputs, inquiry text and tool results; mask click text and element attributes; and disable console, network body/header, canvas and cross-origin iframe recording. We do not build personal profiles. Your name, email, phone number and inquiry text are not sent to PostHog. Even the separate analytics event confirming a received inquiry is sent only if you accepted analytics when you submitted it.
Your choice
Accept all optional enables analytics and advertising. You can enable either category separately in preferences. Reject optional keeps analytics and advertising off. Manage preferences lets you review the categories and save your choice. There are no preselected optional categories for a new visitor.
Closing preferences, scrolling or continuing to use the site does not give consent. If our preference system cannot read or save a valid choice, optional tracking stays off. We remember a valid choice for up to 12 months and may ask again if our optional tracking purposes materially change.
Use Cookie preferences in the footer to withdraw permission at any time. Turning analytics or advertising off reloads the current page to remove that tracking code, so save any unfinished inquiry first. Withdrawing advertising permission also removes Meta’s first-party cookies from this domain. This stops future tracking for the withdrawn purpose on our website and from checkout contexts linked in this browser; it does not erase information already sent or automatically change choices in another browser or device. For access or deletion requests, contact accelerator@onequestion.io.
Browser privacy signals
We honor Global Privacy Control (GPC) and Do Not Track (DNT) by keeping all optional website tracking off, including when a previously saved choice accepted analytics. The preferences panel confirms that your browser’s signal is being honored. We apply this protection regardless of your location.
Clearing cookies removes the saved choice and optional tracking remains off until you make a new choice. You can also block cookies in your browser, though it may prevent us from remembering your preference.
External websites and checkout
Community checkout can open Stripe’s website after you choose Continue or load Stripe’s embedded payment form when the separate Community checkout page loads. Stripe handles payment, fraud prevention and its own privacy choices under Stripe’s privacy policy. Our preference applies to One Question’s website; it does not set choices on an external service. The embedded Stripe payment form opens when the page loads. Stripe handles the payment fields; we do not record them or receive full payment-card details. Our checkout confirmation can verify the completed registration or payment with Stripe. Only for the purposes you accept, browser or server measurement can report that confirmed outcome using opaque receipt identifiers and actual amounts. A checkout click, a complimentary $0 registration and a positive payment remain separate events. Our preference does not control tracking on Stripe’s website.
Changes and contact
We will update this page and its date when these practices change. New optional tracking must be disclosed and connected to your privacy choice before it is used. Questions about cookies or privacy can be sent to accelerator@onequestion.io.