How and Why We Use Cookies
This page explains the cookies and similar technologies on ohioauditors.org/, why we use each category, and the controls available to you under federal and state privacy laws — including the Global Privacy Control (GPC) signal.
What’s on this page
1. What Cookies Are
Cookies are small text files that a website places on your device when you visit. They store information that helps the page work — keeping you logged in, remembering your preferences, recognizing you when you return — and can also be used for analytics and advertising. “Similar technologies” includes pixels, tags, local storage, and SDK identifiers; we treat them all the same way under this policy.
2. The Four Cookie Categories
Strictly necessary
Always onRequired for the site to load and function — load balancing, security, your cookie consent choice itself. Cannot be disabled without breaking the site.
Functional
OptionalRemember preferences such as language and accessibility settings. Used only to improve your experience, not for tracking across sites.
Analytics
Optional · consent requiredAggregated measurement of which pages are useful, how readers move through the site, where to focus editorial improvements. Loaded only after consent.
Advertising
Optional · consent requiredDisplay advertising — frequency capping, ad selection, performance measurement. Loaded only after consent. Subject to CCPA/CPRA “sharing” opt-out and GPC.
3. First-Party Cookies (Set by ohioauditors.org/)
| Cookie | Purpose | Lifetime |
|---|---|---|
| oa_consent | Stores your cookie-banner choice | 12 months |
| oa_session | Maintains a browsing session | Session (deleted on close) |
| oa_csrf | Cross-site request forgery protection on forms | Session |
| oa_pref | Stores accessibility / display preferences | 12 months |
| oa_gpc | Records that a Global Privacy Control signal was received | 12 months |
4. Third-Party Cookies (Set by Other Services)
| Service | Purpose | Loaded |
|---|---|---|
| Google Analytics 4 | Aggregated usage measurement | Only after analytics consent |
| Google AdSense | Display advertising and frequency capping | Only after advertising consent |
| Cloudflare | Security, bot mitigation, CDN performance | Strictly necessary — always on |
| Embedded video / map providers (where used) | Embedded media playback or map display | Only after functional consent (where applicable) |
5. Analytics — Google Analytics 4
We use Google Analytics 4 (GA4) to understand which content is most useful, how readers move through the site, and where editorial improvements are needed. GA4 is loaded only after you consent. Configuration includes:
- IP-anonymization is on by default in GA4
- Identifiable analytics data is retained no longer than 14 months
- “Google signals” advertising features are off
- Data-deletion requests are honored under CCPA/CPRA, TDPSA, FDBR, and similar state laws
To opt out at the Google level, install the official Google Analytics Opt-Out Browser Add-On.
6. Advertising — Google AdSense
Display advertising on the site is served through Google AdSense, which uses cookies and identifiers to limit how often you see the same ad and to measure ad performance. Advertising cookies are loaded only after you consent.
Use of advertising cookies for cross-context behavioral advertising may meet the CCPA/CPRA definition of “sharing.” If you opt out — through the cookie banner, the GPC signal, or by emailing us — we will stop loading advertising cookies for your session and signal “do not share” to advertising networks where supported.
Google’s ad-personalization controls: adssettings.google.com.
7. Security and CDN — Cloudflare
Cloudflare provides DDoS protection, bot mitigation, and content-delivery acceleration. Cloudflare cookies (such as cf_clearance) are strictly necessary for the site to function safely and are not used for analytics or advertising. They cannot be turned off without making the site less secure or unavailable.
8. How We Ask for Consent
On your first visit, the cookie banner gives you three buttons: Accept all, Reject non-essential, and Customize. Strictly-necessary cookies are loaded immediately. Analytics and advertising cookies are loaded only after you make an affirmative choice. The “Cookie settings” link in the footer reopens the banner so you can change your choice at any time.
9. Global Privacy Control (GPC)
If your browser sends the Global Privacy Control header, we treat it as a valid opt-out of “sale” and “sharing” under CCPA/CPRA, the Colorado Privacy Act, the Connecticut Data Privacy Act, and similar laws that recognize universal opt-out mechanisms. Advertising cookies are not loaded for sessions where GPC is detected.
To enable GPC, use a browser or extension that supports it — Firefox (built-in), Brave (built-in), DuckDuckGo browser (built-in), or extensions like Privacy Badger, OptMeowt, or DuckDuckGo Privacy Essentials. More information at globalprivacycontrol.org.
10. Browser Controls
Every modern browser lets you view, manage, block, and delete cookies in its settings. The exact path differs by browser:
- Google Chrome: Settings → Privacy and security → Cookies and other site data
- Microsoft Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
- Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
- Apple Safari (macOS): Safari → Settings → Privacy
- Brave: Settings → Shields → Cookies
- Opera: Settings → Privacy & security → Cookies and other site data
Blocking strictly-necessary cookies will break parts of the site. Blocking analytics and advertising cookies will not.
11. Mobile Controls
- iOS: Settings → Privacy & Security → Tracking — toggle off “Allow Apps to Request to Track” (App Tracking Transparency); Settings → Apple Advertising → Personalized Ads
- Android: Settings → Google → Ads → “Delete advertising ID” or “Opt out of Ads Personalization”
12. Industry Opt-Outs
| Program | What it does | Where |
|---|---|---|
| Network Advertising Initiative (NAI) | Opt out of interest-based advertising from participating ad networks | optout.networkadvertising.org |
| Digital Advertising Alliance (DAA) WebChoices | Opt out of interest-based advertising from DAA participants | optout.aboutads.info |
| DAA AppChoices | Mobile-app interest-based advertising opt-out | youradchoices.com/appchoices |
| Your Online Choices (EU/UK) | European interest-based advertising opt-out | youronlinechoices.com |
13. Changes to This Policy
We update this policy when our cookie use changes — for example, if we add or remove a third-party service. The “Last reviewed” date at the top reflects the current version. Significant changes will be flagged on the homepage banner for at least 30 days.
14. Contact
For questions about cookies, email info@ohioauditors.org with the subject line “Cookies.” For state-law privacy requests (access, deletion, opt-out of sale/sharing, etc.), see the Privacy Policy.
Manage Your Cookie Preferences
The “Cookie settings” link at the bottom of every page reopens the consent banner. You can change your choice at any time, or send a Global Privacy Control signal from your browser.
📧 Cookie questions