Draft pending legal review. This text has not yet been reviewed by a lawyer and may change before it is final.
Cookies and browser storage
Version 2026-10-26 · Privacy Policy · Terms of Use
Cookies
These are all the cookies this site sets. No advertising cookies.
| Name | Set by | Type | What it does | How long |
|---|---|---|---|---|
| oca_session | academy (first party) | strictly necessary | keeps you signed in; an opaque random id linked to a session record on our server. httpOnly, Secure, SameSite=Lax | ends after 30 days without use, at the latest 90 days after sign-in, or when you sign out |
| oca_csrf | academy (first party) | strictly necessary | protects account actions against cross-site request forgery; a random value your browser sends back with each change. Secure, SameSite=Strict | same as the session |
| _ga | Google Analytics (Google) | analytics, only with consent | distinguishes visitors for statistics; set only after you click Accept in the banner, deleted when you withdraw | up to 2 years |
| _ga_* | Google Analytics (Google) | analytics, only with consent | keeps the state of the current visit for statistics; set only after you click Accept, deleted when you withdraw | up to 2 years |
The two oca_ cookies are set only when you sign in. They are strictly necessary for the account you asked for, so they
do not need consent (§ 25(2) TDDDG, Art. 5(3) ePrivacy Directive, PECR reg. 6(4)).
Google Analytics cookies are set only on public pages and only after you click Accept.
The account area (/account/) and the training app (/app/) load no analytics and no third-party
scripts.
Change or withdraw your choice: . On withdrawal the Analytics cookies are deleted.
Local storage
Some settings are kept in your browser's local storage, not in cookies. They never leave your device:
oca.lang: the interface language you choseoca.watch: which videos you watched and where you stopped (saved every few seconds while a video plays)oca.vsel, oca.sel: your last filters (country, role)oca.hint-dismissed: that a one-time hint has already been shownoca.consent: your Analytics choice
YouTube
When you press play on a video, YouTube (Google) may store data in your browser. Nothing is loaded from YouTube before that click. See the Privacy Policy.