The short version
- This website sets no cookies and stores nothing in your browser.
- It counts visits with Cloudflare Web Analytics, which uses no cookies. It has no advertising or social media trackers, and doesn't follow you around other sites.
- The hailo app sets only the cookies it needs to sign you in and keep your account secure.
The law that covers this, the Privacy and Electronic Communications Regulations (PECR), applies to cookies and to similar technologies such as your browser's local storage, so we list both here.
Hosting, security and visits
This website is hosted on Cloudflare. Cloudflare can set strictly necessary security cookies, such as __cf_bm, if its bot protection is switched on. If a security cookie is ever set on visitors to this website, we'll list it here first.
To see which pages are read and how quickly they load, we use Cloudflare Web Analytics. It runs a small script on each page that reports the page, the site you came from, your type of browser and device, your country and how long the page took to load. It doesn't use cookies or your browser's storage, and doesn't identify you or follow you across other sites. We only ever see totals.
The hailo app
When you sign in to the hailo app, it sets these cookies. They're all strictly necessary to sign you in and keep your account secure, except hlo_remember, which is set only if you ask the app to remember you. Each is encrypted or holds only a random ID, and none is used for analytics or advertising.
| Name | What it does | How long |
|---|---|---|
hlo_auth | Keeps you signed in. | Ends after 2 hours without use, and 12 hours after you signed in at the latest. |
hlo_af | Protects the app's forms against cross-site request forgery. | Until you close your browser. |
hlo_br | A random ID for this browser, so we can email you when someone signs in from a browser we haven't seen before. We keep only a scrambled (hashed) copy. | 400 days. |
hlo_remember | Fills in your email address next time, only if you tick "Save email and login method on this device". It never signs you in by itself. | 180 days, or until you sign in with the box unticked. |
hlo_pending | Remembers which address is waiting for a sign-in code, between the two sign-in pages. | 20 minutes. |
hlo_tried | Puts back an address the sign-up or sign-in page couldn't accept, so you can correct it without typing it again. | 5 minutes. |
The app also keeps two preferences in your browser's local storage: light or dark mode, and whether the menu is collapsed. They stay on your device and are never sent to us. Cloudflare, which protects the app, can also set strictly necessary security cookies, such as __cf_bm, to tell people from bots.
The briefing pages your volunteers and hirers open from a link or QR code don't need an account. They set only hlo_af, which protects the button people press to confirm they've read the briefing.
Changes
If we ever add anything else, such as analytics that uses cookies, we'll update this notice first and ask for your consent wherever the law requires it.