1. In one paragraph
This marketing site sets no cookies. The application sets two strictly necessary cookies so you can stay signed in and submit forms safely. We use no analytics, advertising or tracking cookies anywhere, so there is no cookie banner because there is nothing to consent to.
2. What a cookie is
A cookie is a small text file a website asks your browser to keep and send back on later visits. Cookies that are essential to a service you have asked for do not need consent under the Privacy and Electronic Communications Regulations; all others do.
3. Cookies we set
| Name | Purpose | Lifetime | Type |
|---|---|---|---|
| hfscentral_session | Identifies your signed-in session on the application so you do not have to sign in on every page. | 120 minutes of inactivity, or until you sign out | Strictly necessary |
| XSRF-TOKEN | Protects forms in the application from cross-site request forgery. | Same as the session | Strictly necessary |
| remember_web_* | Set only if you tick "stay signed in" when signing in. | Up to five years, or until you sign out | Strictly necessary, at your request |
The application also uses your browser's local storage to remember whether you collapsed the sidebar. That is not a cookie and never leaves your device.
4. Third-party requests
Pages load fonts from Google Fonts, which means your browser sends its request (including your IP address) to Google. No cookie is set by that request. When you choose a plan you are taken to Stripe's checkout and billing portal, which set their own cookies under Stripe's privacy policy. Our own pages embed no Stripe scripts.
5. Controlling cookies
You can delete or block cookies in your browser settings. If you block the two application cookies you will not be able to sign in. The marketing site works fully with cookies blocked.
6. Changes
If we ever add a cookie that needs consent we will update this page, add a consent control and change the date at the top before it goes live.