Last updated: 2 March 2026
1. What Are Cookies?
Cookies are small text files stored on your device (computer, tablet, or phone) when you visit a website. They are widely used to make websites work efficiently and to provide information to site owners.
2. Legal Basis
In accordance with § 25 TTDSG (Telekommunikation-Telemedien-Datenschutz-Gesetz) and Art. 6(1)(a) GDPR, we only set non-essential cookies (such as analytics cookies) with your explicit consent. Strictly necessary cookies (such as authentication cookies) are set under our legitimate interest in providing a functional service.
3. Cookies We Use
Cookie inventory
- hallostu-cookie-consent-v2 (localStorage)
- Provider: hallostu · Duration: Persistent · Type: Strictly necessary
- Stores your necessary, analytics, and advertising consent choices
- sb-*-auth-token
- Provider: Supabase · Duration: Session / 1 week · Type: Strictly necessary
- Authentication session token for logged-in users
- hallostu_waitlist
- Provider: hallostu · Duration: Persistent · Type: Functional
- Prevents duplicate waitlist signups from the same browser
- hallostu_profile_skipped
- Provider: hallostu · Duration: Persistent · Type: Functional
- Remembers if user skipped the profile setup
- hallostu-journey-local-draft-v1 (localStorage)
- Provider: hallostu · Duration: Up to 30 days from last activity · Type: Strictly necessary
- Saves anonymous intake answers on this browser so you can continue later
- hallostu-anonymous-journey-session-* (localStorage)
- Provider: hallostu · Duration: Up to 30 days from last activity · Type: Strictly necessary
- Links anonymous intake autosaves to the same browser session before account creation
- _ga, _ga_*
- Provider: Google Analytics 4 · Duration: Up to 14 months · Type: Analytics / Advertising (consent required)
- Website traffic analysis and consent-aware measurement — anonymised page views, session duration, browser type, and optional advertising signals when separately approved
- _clck, _clsk, CLID, ANONCHK, MR, MUID, SM
- Provider: Microsoft Clarity · Duration: Up to 12 months · Type: Analytics (consent required)
- User behaviour analytics — heatmaps, session recordings, clicks, scroll depth. Used to understand how visitors interact with the site and improve usability
Note: The items marked as "Persistent" in localStorage do not expire automatically unless a shorter duration is listed, and can be cleared by the user at any time through browser settings.
4. Analytics Cookies (Google Analytics 4)
We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 cookies are only loaded after you accept analytics cookies via our cookie consent banner. If you decline, no analytics cookies are set. If you separately accept advertising cookies, Google may also use ad-related storage, user data, and personalization signals for Google signals and advertising measurement features.
GA4 collects anonymised information including:
- Pages visited and time spent on each page
- Browser type and device information
- Referral source (how you found our site)
- Country-level location (not precise location)
Data is transmitted to Google servers and is subject to Google's Privacy Policy. Google LLC is certified under the EU-US Data Privacy Framework.
5. Behaviour Analytics (Microsoft Clarity)
We use Microsoft Clarity to understand how visitors interact with our website. Clarity falls under the analytics category and only loads after analytics consent. It collects anonymised behavioural data including:
- Heatmaps (where users click and scroll)
- Session recordings (anonymised replays of how users navigate the site)
- Click patterns and scroll depth
- Device and browser information
Clarity does not collect personally identifiable information. Session recordings automatically mask sensitive input fields (such as passwords and email fields). Data is transmitted to Microsoft servers and is subject to Microsoft's Privacy Statement. Microsoft Corporation is certified under the EU-US Data Privacy Framework.
For more information, see Microsoft Clarity and cookie consent.
6. Third-Party Cookies
Supabase (Supabase Inc.) sets authentication cookies when you create an account or log in. These are strictly necessary for the login functionality and are not used for tracking. Data is stored on Supabase-managed infrastructure (AWS eu-central-1).
7. How to Manage Cookies
You can manage cookies in several ways:
- Cookie banner: When you first visit our site, you can accept or decline analytics and advertising cookies
- Browser settings: Most browsers allow you to block or delete cookies through settings. Note that blocking all cookies may affect site functionality (for example, login may not work)
- Clear localStorage: You can clear stored preferences by going to your browser's developer tools and clearing site data for www.hallostu.com
8. Changes to This Policy
We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated date.
9. Contact
For questions about our use of cookies, contact us at info@hallostu.com.