OGFlex
Privacy & cookies
Last updated 5 October 2026
The short version
- What you type never leaves your browser. The tags are generated and the previews drawn on your own device. None of it is sent to us or to anyone else.
- Your image is loaded by your browser, not by us. To preview it, your browser fetches the image address you enter directly from wherever it is hosted, with no referrer. A file you preview from your device is never uploaded.
- There are no accounts and no cookies. Your form, your preview tab and your theme are remembered in your browser's local storage, which never leaves your device.
- Visits are counted, people are not. We use self-hosted, cookieless analytics that collects no personal data and does not follow you between sites or between visits.
What happens to what you type
OGFlex runs in your browser. When you open the site your browser downloads the program itself - the same fixed set of HTML, CSS and JavaScript files everyone gets - and then runs it locally. From that point on, the form, the previews and the HTML they produce live in the browser tab in front of you.
We do not receive what you type, and we could not, because nothing in the app sends it anywhere. There is no upload, no API call, no analytics event carrying your content, and no server-side component that ever sees it. The server's only job is to hand over the application files. When you press Copy or Download, the HTML goes from the browser straight to your clipboard or your disk; when you Import tags, the HTML you paste is read in the browser and nothing is fetched.
The image you preview
To show your image in the previews, and to measure it for the checks, your browser has to load it. It does that directly from the address you type into Image URL - the same as if you had opened that address in a tab. The request goes to whoever hosts that image, not to us, and it is sent with no referrer, so that host is not told it came from OGFlex. Like any web request it carries your IP address and browser details to that host; if you would rather it did not, leave the field empty until the image is somewhere you are happy for your browser to contact.
The sample's image is the one exception: it is part of OGFlex and is served by our own server, like the rest of the application files.
Preview a file from this device does not upload anything. The file is read by your browser and shown in the previews only; it is not stored, and it is gone when you stop previewing it or close the tab.
How to check this yourself
You do not have to take our word for any of the above. Open your browser's developer tools, switch to the Network tab, and use OGFlex normally: fill in the form, switch previews, copy and download the HTML. After the initial load of the application files the only requests you will see are the image at the address you entered and the analytics beacon described below, which carries the page's address and nothing you typed.
What is stored on your device
OGFlex remembers your work so that closing the tab does not throw it away. It does this with your browser's local storage, which is a store on your own computer. Nothing written there is transmitted to us or to anyone else, and nothing in it is readable by another website.
| Name | What it holds | Why |
|---|---|---|
og-session |
Every field in the form, which preview tab you chose, and the output options (Tags or Full page, and the three switches). Not any file you preview from your device. | So a reload or an accidentally closed tab does not lose your work. |
og-theme |
Light or dark, if you have chosen one. | So the app opens in the theme you picked. |
You can remove all of it at any time by clearing site data for this site in your browser's settings - in most browsers, through the padlock or information icon in the address bar. Doing so loses the remembered form and settings and nothing else. If you would rather nothing were kept at all, a private or incognito window discards it when you close the window.
Cookies
OGFlex sets no cookies. Not for sessions, not for settings, not for analytics, not for advertising - there are none.
Our analytics stores nothing on your device at all - no cookie, no local storage, no identifier of any kind - so it falls outside those rules too. That is why OGFlex has no cookie banner: there is nothing to ask you to agree to.
Analytics
We use Plausible Analytics to count how much the site is used. Two things about how it is set up matter here:
- It is self-hosted on our own server in the European Economic Area
(
plausible.vsrc.uk). There is no third-party analytics company receiving anything, and the measurements are not shared with, sold to or combined with data from anyone else. - It is cookieless and identifier-free. It does not set a cookie, use local storage, or store any persistent identifier, so it cannot follow you from visit to visit or from site to site.
For each page view it records:
- the page address on this site - which is only ever a page such as
/or/privacy, and never contains anything you typed; - the site you arrived from, if any;
- your browser, operating system and device type;
- your country and, approximately, region - worked out from your IP address at the moment of the request.
Your IP address is used only to derive the country and to produce a one-way hash that lets the same visitor be counted once rather than twice within a day. The IP address itself is never written to storage, the hash cannot be reversed to recover it, and the secret used to produce it is replaced every 24 hours, so yesterday's hash and today's cannot be matched up. The result is a count of visits, not a record of visitors.
Our lawful basis for this is legitimate interests (UK GDPR Article
6(1)(f)): we need to know roughly how much the site is used and which pages people
reach, and this is the least intrusive way we know of to find out. We have weighed that
against your interests and consider the impact minimal - no personal data is retained,
no profile is built, nothing is shared, and nothing about you is stored on your device.
If you would prefer not to be counted at all, blocking plausible.vsrc.uk
in a content blocker or your browser's settings stops it entirely, and OGFlex works
exactly the same without it.
Server logs
Like every website, the server that hands out the OGFlex application files keeps standard access logs. These record the IP address making the request, the time, the file requested, the response status and the browser's user-agent string. They are generated by the web server itself, not by the app, and they never contain anything you typed - only the fixed file names that make up the program.
We use them to keep the site available and secure and to investigate faults and abuse. The lawful basis is again legitimate interests. They are retained for no longer than 30 days and are not used to build any profile or combined with the analytics above.
Who handles your information
OGFlex has no third-party services embedded in it - no advertising, no trackers, no social media widgets, no external fonts, no content delivery networks, and no third-party analytics provider. The previews imitate how platforms show a link; they do not load anything from those platforms. The only organisation involved besides us is the company that hosts the server, acting on our instructions under a contract, and the only information it handles is what the server logs section describes. The host of any image you preview is your browser's choice of contact, as described above, not ours.
The servers - both the site and the analytics instance - are located in the European Economic Area, which UK adequacy regulations cover, so no transfer safeguards beyond that are needed. We do not transfer anything outside the UK or the EEA.
Security
The site is served only over HTTPS, with HTTP Strict Transport Security, so the application files cannot be tampered with in transit. Since what you type stays in your browser, the strongest protection it has is the one your own device provides.
Contact
For anything about this notice, or to exercise any of the rights above, write to ogflex+privacy@vsrc.uk.