1. What a cookie is
A cookie is a small text file a website drops onto your device so it can remember something between page loads or visits. HeatSure uses cookies for three things: keeping you signed in, remembering your preferences, and (optionally) measuring which pages people actually use.
2. The cookies we set
Essential cookies are always on — the app literally can't hold a session without them. Analytics cookies only fire after you accept the banner on your first visit; you can turn them off any time from your account settings.
| Name | Kind | Purpose | Expires |
|---|---|---|---|
| hs_access | Essential | Signed access token — keeps you logged in for the session. | 15 minutes |
| hs_refresh | Essential | Refreshes hs_access quietly so you don't get bounced to /signin every 15 minutes. | 30 days |
| hs_user | Essential | Cached user profile the sidebar reads. Non-HttpOnly so client components can render. | 30 days |
| next-auth.csrf | Essential | CSRF protection on server actions. | Session |
| next-locale | Functional | Remembers your language/locale between visits. | 1 year |
| _ga / _ga_* | Analytics | Google Analytics anonymised session + page metrics. Only set if you consent. | 2 years |
3. How to control them
Every mainstream browser lets you view and delete cookies for a specific site. Chrome, Firefox, Safari and Edge all put the option under Settings → Privacy. You can also block all third-party cookies at the browser level and HeatSure will still work — you just won't be counted in our analytics.
4. Third parties
The essential cookies are all first-party (set by heat-sure.com). The optional analytics cookies come from Google Analytics. Payment cookies are set by Stripe on their own domain while you're on the checkout page.
5. Contact
Questions about a specific cookie or how to opt out? Email helpme@heat-sure.com and we'll walk you through the specifics for your setup.