Draft awaiting legal review
Draft pending legal review and a cookie audit on the production domain. Complete the actual Google Analytics 4 inventory, retention periods and provider details before publishing this policy as final.
What are cookies?
Cookies are small pieces of data a website can store in a browser to remember a session or enable certain functions. Some require consent; others are needed to provide a requested service.
Cookies identified in the current code
The private administration area uses ha_oauth_state when sign-in starts to validate authentication; its configured maximum lifetime is 10 minutes. After authorised access, ha_session maintains the session for a configured maximum of 7 days.
Both cookies are created only when the administration sign-in is used. They are configured with HttpOnly and SameSite=Lax; Secure is added when the connection uses HTTPS. The public website stores the analytics choice in browser local storage (ha_cookie_consent_v1) for up to 180 days.
External services
If you accept analytics and a measurement ID is configured, the site loads Google Analytics 4. This service may create _ga and _ga_* cookies. Its script is not loaded when you reject analytics. The website also loads a Google Fonts typeface and may contain external links. Audit the published site to confirm the actual technologies used.
Your options
You can accept, reject or configure analytics in the cookie notice and change your choice at any time using ‘Cookie settings’ in the footer. You can also delete cookies in your browser settings.