HeroLap uses a small number of cookies to keep you signed in and to protect the Service from common attacks. We also use Google Analytics to see which pages get used, but only if you allow it. We do not use third-party advertising or cross-site tracking cookies.
1. What is a cookie?
A cookie is a small piece of data your browser stores on behalf of a website. Cookies let the site remember things between requests — for example, that you’re signed in.
2. Cookies we set
Essential — needed for the Service to work
- herolap_session — your authenticated session. Cleared when you log out or after the session expires.
- XSRF-TOKEN — protects you from cross-site request forgery on form submissions and API calls. Rotates on login and logout.
Analytics — only if you allow them
- _ga and _ga_<id> — set by Google Analytics to count visitors and measure which pages get used. They tell us a browser has been here before; they do not tell us who you are.
These are only set once you choose “Allow analytics” in the banner. Until then Google Analytics runs in a restricted mode that stores nothing on your device. We do not use analytics data for advertising and we do not share it with advertisers.
Functional — set by you
- herolap_consent_v1— remembers your analytics choice so the banner stops asking. Stored in your browser’s localStorage; not transmitted to our servers.
3. Cookies we do not set
No advertising, retargeting, or cross-site tracking cookies, and no social media pixels. If that ever changes, we will update this notice before it does.
4. Subprocessor cookies
When you make a payment through Stripe Checkout, Stripe may set its own cookies on its checkout page for fraud prevention. See Stripe’s cookie policy for details.
5. Your choices
You can change your analytics choice at any time from the “Consent settings” link in the footer of any page. Declining, or withdrawing consent later, does not change anything else about how the Service works for you.
You can also clear or block cookies in your browser settings, but the Service will not work properly without the essential cookies above — you will not be able to stay signed in.
6. Contact
Questions? [email protected].