This Cookie Policy explains how EvenHelm uses cookies and similar technologies on our website and in the Service. It sits alongside our Privacy Policy.
01What cookies are
Cookies are small text files a website stores in your browser. Similar technologies (such as a browser’s local storage) work the same way. We group what we use into two kinds: strictly-necessary cookies that are essential to sign you in, and consent-gated analytics that load only if you opt in.
02Strictly-necessary cookies
These cookies are essential to operate the Service securely — they let you sign in and keep your session valid. Because they are strictly necessary to deliver a service you have requested, they do not require consent and cannot be turned off while you use the Service. EvenHelm runs its own authentication, so these are set by EvenHelm (first-party), not a third party.
| Cookie | Purpose | Lifetime |
|---|---|---|
| ac_at | Holds your short-lived signed session (access) token so each request can be authenticated. | Session — expires after 15 minutes |
| ac_rt | Opaque refresh token that lets the app rotate and renew your session without re-entering your password. | Persistent — expires after 30 days |
Both are first-party, strictly-necessary, HttpOnly cookies set by EvenHelm. They contain a signed or opaque session token only — no advertising identifiers and no cross-site tracking.
03Analytics — Google Analytics 4 (consent-gated)
We use Google Analytics 4 (GA4) to understand how our website is used. This is off by default and loads only after you opt in through our cookie banner. If you decline, no analytics scripts, cookies, or network requests to Google are loaded at all.
- Analytics load only after consent — declining loads nothing.
- IP addresses are anonymised.
- Your choice is stored locally in your browser — not in a server-side profile.
- GA4 sets its own cookies (for example to distinguish sessions and users) only once you have consented.
When loaded after consent, GA4 sets the following cookies:
| Cookie | Purpose | Lifetime |
|---|---|---|
| _ga | Distinguishes individual visitors. | Persistent — typically 2 years |
| _ga_<id> | Persists session state for a specific GA4 property (the id is the measurement id). | Persistent — typically 2 years |
These cookies are set only after you opt in; if you decline, they are never created. They are retained for a limited period in line with our analytics provider’s retention settings.
04Fonts — no third-party requests
Our fonts are self-hosted and bundled at build time. Browsing EvenHelm makes no runtime request to Google Fonts or any other font CDN, so no font provider receives your IP address or sets a cookie when you load our pages.
05Withdrawing or changing your consent
You can change your analytics choice at any time:
- Use the cookie banner / preferences control on our site to opt in or out again. Withdrawing consent stops further analytics collection going forward.
- You can also block or delete cookies in your browser settings, though disabling strictly-necessary cookies will prevent sign-in.
Withdrawing consent does not affect any analytics processing that already, lawfully, took place before you withdrew.
06Retention
Strictly-necessary cookies last only as long as needed to keep your session valid: the access cookie (ac_at) expires after 15 minutes and the refresh cookie (ac_rt) after 30 days, and both are refreshed or cleared as you sign in and out. Analytics cookies and data are retained for a limited period in line with our analytics provider’s retention settings.
07Changes & contact
We may update this Cookie Policy as our use of cookies changes. When we do, we will update the “Last updated” date above. For any question about this policy, contact us via our contact form.