1. Scope and controller
This policy covers Editor Ultra and its link to the single ONMAKE sign-in. Controller: ONMAKE S.r.l., with address and contact details in document 03; requests to info@onmake.it. Cookies, local storage, sessionStorage, IndexedDB and cache have different functions but may all write to or read from the device. Technical necessity is assessed against the service requested, not the name given to the tool.
Editor Ultra's code does not load scripts, fonts or stylesheets from third-party services and contains no analytics or advertising of its own. The public website, account area and checkout may use other tools, described in their own interfaces with separate preference management.
2. Editor Ultra authentication cookies
The onmake_session cookie holds the session reference; onmake_refresh allows authentication to be renewed. The maximum lifetime of each is thirty days. The onmake_access cookie holds the short-lived access token and expires after one hour. They are first-party cookies of the host serving the Editor, with Secure, HttpOnly and SameSite=Lax attributes; the path is the application's publishing path (/ultra/). They are not profiling tools and do not contain the user's document.
The sign-in page uses the ONMAKE account library, which may keep its own session in the browser's local storage (an sb-... key of the ONMAKE project). Where the session shared among ONMAKE apps uses the onmake-auth cookie on the .onmake.it domain, it lasts thirty days, is Secure and SameSite=Lax and, because the page must read it, is not HttpOnly.
These cookies serve a service requested by the user and need no consent for strictly necessary purposes. Refusing or deleting them may interrupt access.
3. Local storage and documents
The IndexedDB database onmake-editor-sessione keeps session state, open or suspended documents and recovery information, separated by user; onmake-benvenuto-recenti keeps the list of recent files. They may contain personal data and confidential documents, not just preferences, and have no fixed expiry: they remain until deleted by the user, the browser or a service function. Per-user separation is not encryption on the device.
Local storage keeps settings such as language (exactdoc-language), measurement unit, theme and accent, toolbar and panel layout, favourite and recent fonts, spreadsheet and PDF-tool views and the PDF engine setting (onmake-pdf-dispositivo, onmake-motore-pdf). These settings persist until cleared or reset.
For the Editor Ultra functions that connect an AI assistant: the IndexedDB onmake-agente keeps, in encrypted form, the provider, address, model and key of the assistant the user connected (the encryption key is created in the browser and is not extractable); the IndexedDB onmake-connect keeps the ONMAKE Connect log and settings. sessionStorage keeps, for the life of the tab, some opening parameters (onmake-apri, onmake-da, onmake-connect) and, during OpenRouter sign-in, onmake-or-verifier.
Storage strictly necessary to keep a session or perform a requested save is distinct from any optional, non-necessary functions. Any new storage for statistics, advertising or other purposes requires assessment and, where applicable, prior consent.
5. Website, third parties and consent
Voluntarily opening external links, for example to typography resources or graphics tools, takes you to those operators' sites and policies; the link alone is not an automatic embedding. When the user connects an AI provider, the browser communicates directly with that provider (document 07). Stripe cookies are governed by the checkout and the provider's information; the Editor does not read card data.
On the public website, any non-necessary analytics must stay inactive until the user makes a valid choice; refusal and withdrawal must be as accessible as acceptance.
6. Changes and rights
New non-necessary tools are not introduced merely by accepting updated terms: changes are communicated before activation and consent is requested where due. Document 03 applies to privacy rights, recipients and transfers.