Legal

Cookie Policy

Last updated: 16 July 2026

Short version

We use only 4 cookies, all of which are essential for the service to function. We set no advertising cookies and no tracking or analytics cookies. Two are our own; two are from Stripe for payment fraud prevention.

1. What are cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. They allow the site to remember information about your visit — for example, keeping you logged in between pages.

Cookies are not programs and cannot carry viruses. However, they can be used for tracking by third-party advertising networks. Hesgram does not use any such cookies.

2. Cookies we use

The table below lists every cookie set by Hesgram:

Name	Type	Duration	Purpose	3rd party?
hg_session	Essential	Session / 7 days (Remember me)	Stores your encrypted authentication token so you remain logged in across page loads.	No
hg_csrf	Essential	Session	CSRF protection token — prevents cross-site request forgery attacks on form submissions and API calls.	No
__stripe_mid	Essential	1 year	Set by Stripe to prevent fraud during payment processing. Only present on billing pages.	Yes (Stripe)
__stripe_sid	Essential	Session	Stripe session cookie for payment fraud detection.	Yes (Stripe)

3. What we do not use

We do not use:

Google Analytics or any other analytics platform that tracks individual users.
Facebook Pixel, Google Ads remarketing tags, or any advertising cookies.
Hotjar, FullStory, or any session recording tools.
Affiliate tracking cookies.

If we introduce analytics in the future, we will update this policy and seek your consent before setting any non-essential cookies.

4. Stripe cookies

Stripe, our payment processor, sets two cookies on billing-related pages (/billing, /register). These are used solely for fraud detection and are necessary for secure payment processing. We have no control over these cookies.

Stripe’s cookie policy is available at stripe.com/legal/cookies-policy.

5. Managing and deleting cookies

You can control cookies through your browser settings. Instructions for the most common browsers:

Chrome: Settings → Privacy and security → Cookies and other site data.
Safari: Preferences → Privacy → Manage Website Data.
Firefox: Settings → Privacy & Security → Cookies and Site Data.
Edge: Settings → Cookies and site permissions.

If you block or delete the hg_session cookie you will be logged out of Hesgram and will need to log in again on each visit. Blocking the CSRF cookie may prevent forms from submitting correctly.

6. Changes to this policy

We may update this policy if we introduce new features that require additional cookies. We will notify registered users by email before setting any new non-essential cookies. The latest version is always at hesgram.com/cookies.

7. Contact

Questions about cookies or your privacy:
Email: privacy@hesgram.com