What this covers
This policy covers cookies, local storage, and similar browser technologies on hearthlight.app. It should be read with the Privacy Policy.
Necessary and requested storage
- hearthlight_consent_v1: Records whether analytics was allowed, the policy version, the decision date, and whether a browser privacy signal was active. Maximum life: 180 days.
- Authentication cookies: Secure session and anti-forgery cookies keep accounts signed in and protect account actions. Names and lifetimes can vary according to the authentication flow and browser security rules.
- Theme and interface preferences: Browser storage remembers a selected appearance, filters, dismissed notices, saved searches, drafts, and other requested interface settings. Each value remains until its feature replaces it or the user clears site data.
- Stripe: Stripe may use necessary fraud-prevention and checkout cookies when a user starts checkout or manages a subscription.
Optional Google Analytics
If you allow analytics, Google Analytics 4 measures public page visits, referral sources, device and browser details, and general interaction patterns. It does not run on sign-in, registration, invitation, account, household, admin, or dashboard pages.
- _ga: Distinguishes visitors. Google documents a default expiration of 2 years.
- _ga_<container-id>: Persists session state. Google documents a default expiration of 2 years.
Diagnostics
Sentry receives limited error diagnostics needed to keep the service reliable. Browser session replay and client performance tracing are disabled. The client configuration removes user identity, cookies, request bodies, request headers, and query strings before an error event is sent.
Your choice
Google Analytics stays blocked until you select Allow analytics. Keeping analytics off does not limit access to the public site. The Cookie settings button remains available so you can withdraw consent. Withdrawing stops future analytics loading and removes first-party _ga cookies the site can access.
Global Privacy Control and Do Not Track keep analytics off. Browser controls can also remove site storage, although removing authentication cookies signs an account out.
Contact
Questions can be sent to privacy@hearthlight.app.