Cookie Policy
One Life Leads, LLC d/b/a Lead Suite OS Effective date: October 27, 2026
This policy explains how Lead Suite OS uses cookies and similar technologies on our website and in the Lead Suite OS application, what each one does, and how you can control them.
At a Glance
- What cookies do we use? Only a small set of strictly necessary cookies that keep you signed in, keep connections secure and unlock specific features, plus Cloudflare Turnstile for bot protection.
- Do we use advertising or analytics cookies? No. Our website and the Lead Suite OS application do not use advertising cookies, advertising tags or third-party analytics.
- Lead forms and lead products may use their own cookies and advertising tags. Those are governed by the privacy policy shown on each form or product. See Section 3.
- How can you control cookies? Through your browser settings. You can also record a Do Not Sell or Share choice, and we honor the Global Privacy Control signal. See Sections 4 and 5.
Contents
- 1. What Are Cookies and Similar Technologies
- 2. Cookies on Our Website and Application
- 3. Lead Forms and Lead Products
- 4. Do Not Track and Global Privacy Control
- 5. Your Cookie Choices
- 6. Cookie Duration and Data Retention
- 7. International Data Transfers
- 8. Changes to This Cookie Policy
- 9. Contact Us
1. What Are Cookies and Similar Technologies
A cookie is a small text file that a website places on your browser or device. It lets the site recognize your browser and remember information between page loads. Cookies can be "first-party," set by the site you are visiting, or "third-party," set by another company whose code is running on that site.
We also use localStorage and sessionStorage. This browser storage works like a cookie but is not sent to a server with every request. We use it to remember interface preferences, to save unsent meeting-note drafts so you don't lose your work, and to remember whether a Global Privacy Control opt-out has already been recorded during your session. This information stays in your browser unless you submit it.
We do not use device fingerprinting.
2. Cookies on Our Website and Application
2.1 Strictly Necessary Cookies (always on)
These cookies are required to log you in, protect your account, connect your integrations, and deliver features you have asked for. Without them, the application would not work or would not be secure, so they are always on and cannot be switched off in our systems. They are first-party cookies, except for the Cloudflare Turnstile cookies.
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
| Supabase authentication session cookies | Supabase (via Lead Suite OS) | Keep you signed in and maintain your authenticated session | Set by session configuration; not separately specified |
| google_oauth_state | Lead Suite OS | Security check (anti-forgery) when you connect your Google account | Used for the connection flow; not separately specified |
| google_oauth_user | Lead Suite OS | Remembers which user is completing the Google connection | Used for the connection flow; not separately specified |
| google_oauth_provider | Lead Suite OS | Identifies the Google connection being completed | Used for the connection flow; not separately specified |
| google_oauth_return_to | Lead Suite OS | Returns you to the right place in the CRM after connecting Google | Used for the connection flow; not separately specified |
| ghl_oauth_state | Lead Suite OS | Security check (anti-forgery) when you connect your GoHighLevel account | Used for the connection flow; not separately specified |
| ghl_oauth_user | Lead Suite OS | Remembers which user is completing the GoHighLevel connection | Used for the connection flow; not separately specified |
| ghl_oauth_provider | Lead Suite OS | Identifies the GoHighLevel connection being completed | Used for the connection flow; not separately specified |
| crm_admin_impersonation | Lead Suite OS | Marks a logged support-access session, so any access by our staff to an account is identifiable and recorded | Not separately specified |
| secure_form_unlock | Lead Suite OS | Keeps encrypted Secure Forms unlocked for your session once you have verified access | Not separately specified |
| developer_portal_unlock | Lead Suite OS | Grants access to the developer portal feature | Not separately specified |
| power_dialer_beta_unlock | Lead Suite OS | Grants access to the Power Dialer beta feature | Not separately specified |
| Cloudflare Turnstile cookies (names set by Cloudflare) | Cloudflare | Bot protection, to tell real people from automated traffic on forms and sign-in | Set by Cloudflare |
2.2 Services Supporting the Application
- Supabase. Provides our authentication and backend infrastructure. Its session cookies keep you signed in.
- Cloudflare Turnstile. A bot-protection tool that may set cookies to tell people from automated traffic.
- Sentry. Error monitoring. We run it without session replay and with personal-data sending disabled. It does not set an analytics cookie.
- Stripe. Our payment processor. Where Stripe's payment components load, Stripe may set its own cookies for payment functionality and fraud prevention.
2.3 Functional, Analytics and Advertising Cookies
We do not use functional cookies that require consent, third-party analytics (such as Google Analytics), or advertising cookies or tags on our website or in the application. If we introduce any of them in the future, we will update this policy first and ask for your consent where the law requires.
3. Lead Forms and Lead Products
Our lead store and real-time lead products include lead forms. Those forms, and the products they belong to, may use their own cookies, advertising tags and server-side conversion tools. Their use is governed by the privacy policy shown on each lead form or product, including any choices you have about them. This Cookie Policy does not cover them. If you have questions about a specific lead form, contact the business named on that form.
4. Do Not Track and Global Privacy Control
Global Privacy Control (GPC): honored
We honor the Global Privacy Control signal. When your browser sends GPC, we treat it as a request to opt out of the sale and sharing of your personal information. When you are signed in to the Lead Suite OS application, we record that opt-out on your account automatically. Because our website and application do not use advertising cookies or tags, there are no advertising cookies to switch off.
Do Not Track (DNT): not honored
We do not treat the older "Do Not Track" browser setting as an opt-out. DNT has no agreed technical standard or legal definition of what a website should do when it detects the signal, and GPC is the signal now recognized in law.
Do Not Sell or Share
You can also record your choice on our Do Not Sell or Share My Personal Information page, under Settings → Security & Privacy in the application, or by emailing legal@onelifecrm.com. Opting out does not affect the strictly necessary cookies that run the application.
5. Your Cookie Choices
Consent
We use only strictly necessary cookies, which do not require consent under the laws that apply to us, so you will not see a consent prompt for them.
Browser settings
Every major browser lets you block or delete cookies. These guides explain how:
What happens if you block all cookies
If you block everything, the application will not work properly. You will not be able to stay signed in, connect Google or GoHighLevel, unlock Secure Forms, or use bot-protected forms, because these features depend on the strictly necessary cookies in Section 2.1. We suggest allowing first-party cookies for our domain.
6. Cookie Duration and Data Retention
Session and persistent cookies
- Session cookies are deleted when you close your browser. Many of our strictly necessary cookies are designed to serve you only for the length of a login or a connection flow.
- Persistent cookies stay on your device until they expire or you delete them.
We have not set out a fixed lifespan for each cookie in the table above, because some are set by our providers and can change. You can see the exact expiry for any cookie in your browser's developer tools or cookie settings.
Data kept after a cookie expires
Deleting or expiring a cookie does not necessarily delete data that was already collected through it. Information collected on our own systems is kept as described in our Privacy Policy.
How to clear existing cookies
In any major browser, open Settings, then Privacy (or Privacy and Security), then Cookies or Site Data, and choose to clear cookies and site data. Clearing cookies will sign you out of the application. Clearing localStorage and sessionStorage also deletes any unsent meeting-note drafts held in your browser.
7. International Data Transfers
We are based in the United States. Some of the services in Section 2.2 operate globally, so information collected through cookies and similar technologies may be processed in the United States and other countries. Each provider's own privacy policy describes how it handles international transfers.
8. Changes to This Cookie Policy
We update this policy when our practices, the cookies we use, or the law change. The "Effective date" at the top shows the most recent revision. If we make a material change, we will post a notice on our website or in the application. If we introduce a new category of cookie that requires consent, we will ask for your consent before using it, where the law requires.
9. Contact Us
If you have questions about this policy, want to opt out of sale or sharing, or want to ask about a specific cookie, please reach out:
One Life Leads, LLC d/b/a Lead Suite OS Email: legal@onelifecrm.com Website: https://www.leadsuiteos.com Address: 50 Cockle Hill Rd, Salem, CT 06420, United States
This policy is governed by the laws of the State of Connecticut, USA, without limiting any rights you have under the privacy laws that apply to you.