Cookie Policy

Last updated: July 2025

What Are Cookies

Cookies are small text files that websites place on your device when you visit them. They are widely used to make websites work efficiently, as well as to provide information to the site owners. Cookies may be "persistent" cookies (which remain on your device until they expire or you delete them) or "session" cookies (which are deleted when you close your browser).

Cookies can be set by the website you are visiting ("first-party cookies") or by other services that the website embeds, such as analytics providers or embedded content ("third-party cookies").

How HeyHi Uses Cookies

HeyHi uses essential-only cookies to provide and maintain the core functionality of our service. We do not use cookies for tracking, advertising, profiling, or any form of cross-site behavioral monitoring. HeyHi does no tracking of any kind — not for analytics, not for marketing, and not for any third-party service.

Specifically, HeyHi uses the following types of essential cookies:

  • Session / Authentication Cookies: These cookies are strictly necessary to keep you signed in to the HeyHi Portal as you navigate between pages. They contain an encrypted session identifier and do not store any personal information. They expire when you log out or close your browser.
  • Preference Cookies: A single cookie stores your theme preference (light or dark mode) so the portal remembers your display choice on return visits. This cookie contains no personal data and is used solely for accessibility and user experience. No tracking is performed with this cookie.
  • CSRF Protection Tokens: A transient cookie used to prevent cross-site request forgery attacks. This is a security-essential cookie that is automatically deleted after each session. It does not track you in any way.

Cookie Consent Banner

When you first visit the HeyHi Portal, you will see a cookie consent banner at the bottom of the screen. This banner informs you that HeyHi uses essential-only cookies and does no tracking. Because we only set strictly necessary cookies that are required for the service to function, we rely on the "strictly necessary" exemption under the ePrivacy Directive and GDPR. No opt-in consent is required for essential cookies.

The banner includes:

  • A clear statement: "This site uses only essential cookies – no tracking. By continuing you accept their use."
  • A link to this Cookie Policy for full details.
  • A dismiss button that hides the banner. The dismissal choice itself is stored in localStorage (so we know you have seen the notice). No tracking is associated with this choice.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have certain data protection rights under the General Data Protection Regulation (GDPR). Because HeyHi uses essential-only cookies with no tracking, the data collected via cookies is minimal. Nevertheless, you retain the following rights:

  • Right to Access: You may request a copy of any personal data we hold about you. Since our cookies contain no personal data beyond an encrypted session token, this is limited to account-related information stored server-side.
  • Right to Rectification: You may ask us to correct any inaccurate data. You can update your account details directly in the HeyHi Portal at any time.
  • Right to Erasure: You may request deletion of your data. Because HeyHi does no tracking and stores no cookie-based profiles, erasure is straightforward. Contact us and we will remove your account and all associated data within 30 days.
  • Right to Restrict Processing: Given that HeyHi performs no tracking and processes only essential authentication data, there is no non-essential processing to restrict.
  • Right to Data Portability: You may export your HeyHi account data in a structured, machine-readable format upon request.
  • Right to Object: Since HeyHi does not process cookie data for marketing, profiling, or any non-essential purpose, there is no processing to object to. For account-related data, you may object and we will cease processing unless we have compelling legitimate grounds.

Third-Party Cookies

HeyHi does not serve any third-party cookies. We do not embed third-party analytics scripts, advertising pixels, social media trackers, or any other third-party content that sets cookies. Your browsing activity on the HeyHi Portal is entirely private and is not shared with any external service.

How to Control Cookies

Most web browsers allow you to control cookies through their settings. You can configure your browser to block all cookies, delete cookies when you close the browser, or alert you when a cookie is being set. However, blocking essential cookies may prevent the HeyHi Portal from functioning correctly (e.g., you will not be able to stay signed in).

To manage cookies in your browser:

  • Google Chrome: Settings → Privacy and Security → Cookies and other site data
  • Safari: Preferences → Privacy → Cookies and website data
  • Firefox: Options → Privacy & Security → Cookies and Site Data
  • Microsoft Edge: Settings → Privacy, search, and services → Cookies

Changes to the Cookie Policy

While our commitment to essential-only cookies with no tracking is fundamental to our product philosophy, we may occasionally update this Cookie Policy to reflect changes in our practices or for legal compliance. If we ever introduce a new type of cookie or change how we use cookies, we will:

  • Notify all active users via email and an in-portal banner at least 30 days before the change takes effect.
  • Update this Cookie Policy with a detailed description of any new cookies, their purpose, and their retention periods.
  • Present a renewed consent banner requiring opt-in consent before any non-essential cookies are set, in full compliance with the ePrivacy Directive and GDPR.

We encourage you to review this policy periodically. Continued use of the HeyHi Portal after any changes constitutes acceptance of the updated policy.

Summary

HeyHi uses essential-only cookies for authentication, security (CSRF protection), and preference storage (theme). We do no tracking. We serve no third-party cookies. We collect no analytics or advertising data. Your privacy is not a feature — it is the default.