Cookie Policy

1. What cookies are

Cookies are small text files stored on your device by websites you visit. They allow the website to recognise your device and remember information about your visit (like preferences, login state, or analytics).

We also use similar technologies including local storage, session storage, and pixel tags. This policy covers all of them under the general term "cookies".

2. Types of cookies we use

We use the minimum set of cookies necessary to run the Service well.

Strictly necessary

These enable core functionality and cannot be switched off. Blocking them will prevent the website from working. We do not require your consent for these.

Functional

These remember your preferences (theme, language, dashboard layout). They enhance your experience but are not strictly required.

Analytics

These help us understand how visitors use our website (pages viewed, features used, time on site). We use privacy-first, cookieless analytics where possible.

Marketing

We do not use marketing or advertising cookies on our marketing website. We do not track you across other sites.

3. Specific cookies

Cookies we set directly:

• hd_session (strictly necessary) — authentication token, expires when you sign out
• hd_csrf (strictly necessary) — CSRF protection, expires with session
• hd_preferences (functional) — UI preferences, 12 months
• hd_consent (strictly necessary) — records your cookie choices, 12 months

4. Third-party cookies

We use minimal third-party services on the marketing website:

• Plausible Analytics — cookieless, GDPR-compliant, aggregate-only analytics. No personal identifiers.
• PostHog — product analytics on the app subdomain only. Anonymous by default; identified only for logged-in customers with their consent.
• Stripe — payment processing on billing pages only. Sets a Stripe fraud detection cookie.

We do not use Google Analytics, Facebook Pixel, Google Ads pixels, LinkedIn Insight Tag, or any advertising trackers on our website.

5. Managing your preferences

You can manage cookie preferences in three ways:

1. Our cookie banner — displayed on your first visit and accessible via the "Cookie preferences" link in the footer
2. Your browser settings — most browsers let you refuse or delete cookies; check your browser's help documentation
3. Do Not Track — we honour DNT signals; when DNT is on, all non-essential cookies are disabled automatically

Blocking strictly necessary cookies may prevent the Service from working correctly.

6. Updates to this policy

We may update this Cookie Policy from time to time. We will announce material changes via email to account holders and via a banner on the website. The "Last updated" date at the top of this page shows when the policy was most recently revised.

Questions about cookies? Email help@hummingdesk.com.