Cookie Policy

Everything the 1map application stores in your browser, what it is for, how long it lasts, and what happens if you decline it.

Version 2.1In force since 2026-11-11

1map has to remember a small amount of information in your browser in order to sign you in and keep that sign-in secure. Without it, the application has no way of telling one signed-in person from another, so it simply cannot work.

Everything else we store is there for your convenience, on your device. It covers the colour theme you prefer, the language you chose and where you left a panel. It also keeps a local list of any errors you ran into, so our support team has something to work with. Those are genuinely your choice.

  • No advertising. No adverts, no ad profiles.
  • No trackers. Nothing follows you to other sites.
  • Nothing sold. No advertisers, no data brokers.

A cookie is a small piece of text that a website asks your browser to keep and hand back on the next request. It travels between your browser and our server automatically.

Browser storage (sometimes called "local storage") does much the same job, with one important difference: the information stays on your device and is never sent anywhere automatically. The application reads it back when you return.

This page covers both, because from where you sit they are the same thing: something the application remembers about you on this device.

Category Status What it covers Worth knowing
Strictly necessary Always on Signs you in, keeps that sign-in secure (including, only if you ask for it, letting a browser skip the two-factor code for 30 days), remembers which account you are working in, and keeps your open tabs in step so that working in one does not let another time out. You can't switch this off. That's not our preference: without it, you don't get an anonymous session. It gives you no session at all.
Preferences Your choice Your theme, language, sound and tooltip settings, the screensaver timeout, where you left panels and dialogs and how big you made them, your selection colour, and a short-lived saved copy (cache) of map layer boundaries so the map doesn't have to ask for them again. If you decline: everything still works and everything can still be changed. The application simply stops remembering your choices for next time on this device. If you are signed in, your language and theme are also held on your 1map profile, so those two follow you anyway.
Diagnostics Your choice A local list of the last 50 errors you encountered, and a short trace of the last 300 sign-in and sign-out events so that an unexpected sign-out can be explained after the fact. Both stay on your device. Neither is uploaded on its own, and neither is read by us unless you are working with our support team and choose to send it. If you decline: nothing is recorded, and the application behaves identically in every other respect.
Statistics and Marketing None used We store nothing in these categories, so there is nothing to allow or refuse. They are listed here only so that you can see the absence rather than have to assume it.
What it is called Kind What it is for How long it stays
jwt Cookie Your signed-in session. This is the one that carries your name and e-mail address; it never contains your password. The cookie is signed, so it cannot be altered, but not encrypted, so anyone holding it could read those details; it cannot be read by the page’s own scripts. Up to two hours, renewed while you are working, and never more than eight hours after you sign in
csrf-token Cookie A random value that proves a request came from you, and not from another website acting in your name. Until you close the browser
refreshToken Cookie Set only when you sign in on an embedded 1map map opened on 1map’s own web address; the map does not use it. The 1map web application does not set it, and the 1map FieldApp and API connections keep their own sign-in in the app, not in your browser. Up to seven days
connect.sid Cookie Used only while you sign in through Google or Microsoft, to carry you between them and us. Up to twenty-four hours
omap_tb_ followed by your user number Cookie Set only if you tick “Don’t ask again on this browser for 30 days” when you enter a two-factor code, so that this browser can skip the code. It does not sign you in: your password is still needed. It cannot be read by the page’s scripts and is sent only to the sign-in part of our server. Up to thirty days
omap_signed_in Cookie Shared with www.1map.co.za. Holds only the time your sign-in ends, so that the website can show that you are signed in. Until your sign-in ends, at most eight hours
omap_theme, omap_lang Cookie Shared with www.1map.co.za. Your colour theme and language, so that the website matches the application. Preferences. Up to one year
session Browser storage A copy of your name, e-mail address, accounts and permissions, so that pages can be drawn without asking our server all over again. Until you sign out
onemap-last-activity Browser storage The time you were last active. A single number, shared between your open tabs. Until you sign out
onemap-cookie-consent Browser storage The choice you make on the cookie notice, so that you are not asked again. Until you change it
accountSwitchInProgress, logout-redirect, and similar Browser storage (this tab) Short-lived markers that carry you through switching accounts or signing out. Until you close the tab
user-theme, user-locale, user-sound-enabled, user-tooltips-enabled, user-screensaver-* Browser storage Your theme, language, sound, tooltip and screensaver settings. Preferences. Until you change it
sidebar-collapsed, dashboard.statsCollapsed, recordEditDialogState Browser storage Where you left panels and dialogs, and how big you made them. Preferences. Until you change it
onemap_sidebar_open_submenus, omap.storageBrowser.cameraMap Browser storage Which sidebar menus you left open, and the settings of the small location map in the file browser. Preferences. Until you change it
subLayersDialogState_..., logs-filter-collapsed-... Browser storage One entry per layer and per log tab, remembering the size of a sub-layer window and whether a filter panel was left collapsed. Preferences. Until you change it
onemap-sync-map-tabs, onemap-map-view-state Browser storage Whether you asked two browser tabs to keep their maps in step, and the shared map position while they are. Preferences. Until you change it
onemap-selection-color, onemap-selection-vertices-enabled Browser storage The colour and style used to highlight features you select on the map. Preferences. Until you change it
onemap_layer_extents Browser storage The outer boundary of each map layer, so the map does not have to ask for it again every time. Preferences. Up to twenty-four hours per layer
app_errors Browser storage The most recent errors, so that support can see what went wrong. Diagnostics. The last 50 only
onemap-session-trace Browser storage A short list of sign-in and sign-out events. Diagnostics. The last 300 only

The notice appears the first time you visit, before you sign in, not after, because we create the security cookie as soon as the page loads. Waiting until you were signed in would mean asking your permission after we had already acted.

Button What it does
Decline optional We keep only the strictly necessary items. We immediately delete anything optional already stored on this device.
Customise Opens the two switches, Preferences and Diagnostics, so you can allow one and not the other. Neither is ticked in advance, so opening it and saving straight away has exactly the same effect as declining.
Allow all Both optional categories are allowed.

The three buttons are deliberately the same size and the same colour. Consent is not freely given if refusing is visibly harder than accepting.

Open the menu under your initials in the top-right corner and choose Cookie settings. The notice opens again and you can answer differently. Anything you switch off is deleted from that browser straight away, and the record we hold of your earlier answer is erased at the same time: not marked as "declined", but removed, so that nothing remains claiming you agreed to something.

Withdrawing takes a few clicks from the menu under your initials, the same menu as your profile. It's meant to be no harder than giving consent in the first place.

Your browser holds the answer that actually governs what gets stored. We additionally record it against your 1map user profile, for two reasons: so that accepting on your laptop does not mean being asked all over again on your phone, and so that we hold a record we can produce if you or a regulator ever ask us to demonstrate that consent was given.

We record Why
The date and time you accepted The record of when consent was given.
Which version of this notice you accepted Consent is only valid for what you were actually told. If we change what we store, this version number changes and everyone is asked again.
Which categories you allowed So the same answer can be applied on your other devices.
The IP address it came from (the internet address of your connection) Kept solely as part of the record that consent was given. It is not used for anything else: not for analytics, not for location, not for profiling.

If you have never answered the notice, none of the above exists for you. We did not fill it in retrospectively for existing users, because a record saying somebody consented when they were never asked is worse than no record at all.

1map doesn't sell anything stored in your browser, share it with an advertiser or hand it to a data broker. Nobody else sees it, with two exceptions:

  • If you sign in with Google or Microsoft, that sign-in happens on their site, under their own privacy terms, and they may set their own cookies in the process. We receive only the confirmation that you are who you say you are.

  • If you're using the 1map Widget embedded in somebody else's website, the widget stores a small cache of map layer boundaries under that site's address, not ours. It is covered by that site's own cookie notice. It contains no personal information, only the outer boundary co-ordinates of map layers.

You may ask us at any time what we hold, ask for it to be corrected, or ask for the record of your cookie choice to be deleted. Deleting that record does not affect your 1map account; it simply means you will be asked the question again the next time you visit.

Declining the optional categories has no effect on your access to 1map, the data you can see, or the support you receive. It is not a condition of using the service, and nothing is withheld from you for saying no.

Questions or requests: speak to your account administrator, or contact 1map support. For requests about the information we hold about you, email our Information Officer at [email protected].

Every version of this notice carries a version number, shown here and inside the application under the About tab of the cookie notice. If we ever change what we store, that number goes up and the notice is shown to everyone again, on every device, so that the consent we hold always matches what you were actually told. It is not a silent update.

All versions