A short, honest list of cookies.

Cookies are small files a website stores in your browser. They let us recognize you between requests, keep you signed in, and remember your preferences.

• Session cookies (essential) — we set a signed, HTTP-only session cookie (hoa-portal.session_token) when you sign in. Without it, you cannot use the authenticated portal.
• Preference cookies — light/dark mode, sidebar state, and similar UI preferences. Lifetime: up to one year.
• Security cookies — cookies used to mitigate CSRF and session fixation. Required for secure operation.
• Analytics cookies (Google Analytics 4) — we use Google Analytics to understand aggregate, de-identified usage of our marketing site (which pages are visited, broadly where traffic comes from) so we can improve it. This sets Google's _ga cookie (distinguishes visitors, ~2 years) and _ga_<id> / _gid cookies (session and measurement state, ~24 hours to 2 years). We do not use these for advertising. You can opt out via your browser settings or Google's opt-out add-on.

We do not use third-party advertisingcookies. Payment pages embed Stripe, which sets its own cookies on its domain to detect fraud and secure transactions; see Stripe's cookie policy for details.

You can clear or block cookies through your browser settings, but disabling essential cookies will prevent you from signing in.

Questions: privacy@hoaflow.io.