Legal · Cookies
Cookie Policy
1. What this policy covers
This policy explains cookies and similar storage or access technologies on the public website and customer dashboard. Necessary technologies support a service you request. Analytics and advertising technologies remain off unless you choose to enable them.
2. Your choices
The first time you visit, you can Accept all, Reject all or Manage preferences. Rejecting optional technologies does not prevent account, security or checkout functions. You can change or withdraw your choice at any time using . A changed choice applies to future activity; the application also attempts to remove optional first-party cookies it controls.
3. Technologies currently controlled by the application
| Name | Category and purpose | Duration |
|---|---|---|
hommmai_consent | Necessary. Stores policy version, analytics choice, advertising choice and choice timestamp. | 180 days |
app_session | Necessary. Keeps a signed-in customer session secure. | Up to 7 days under the published server configuration. |
oauth_flow | Necessary. Protects and completes a requested social-login flow. | Up to 10 minutes. |
hommmai_attribution | Analytics/advertising, depending on your choices. An opaque, signed and HttpOnly handoff identifier links permitted campaign data across our trusted site and app domains. It contains no campaign data or account details. | Up to 30 days under the published server configuration. |
4. Analytics and advertising
Google Tag Manager is only a tag orchestrator. In this implementation, its script is not requested until Analytics or Advertising is enabled. Consent Mode defaults analytics storage, advertising storage, advertising user data and advertising personalisation to denied; security storage remains granted. GTM must be configured so every destination tag has the matching consent requirement.
With the relevant permission, we may record campaign parameters, a sanitised landing path and referrer, and advertising click identifiers. These are kept server-side and associated with an account only after sign-up. Advertising click identifiers are not captured when Advertising is denied. Exact Google Analytics, advertising or campaign-cookie names and lifetimes depend on the tags actually published in the GTM container. They must be inventoried from the production container and added here before those tags are enabled; this policy does not guess them.
5. Hosted services
Google, GitHub and Paddle may use strictly necessary or other technologies on pages they host when you request login or checkout. Their own notices and controls apply to those domains. You should review the provider notice shown during the hosted interaction for its current cookies, purposes and retention.
6. Browser controls and limitations
You can also delete or block cookies in your browser. Blocking necessary storage may stop login, reservation or preference-saving functions. Removing cookies does not delete account or transaction records held for separate purposes; see the Privacy Policy.
7. Contact and updates
Questions can be sent to info@hommm.net. We will update the effective date and consent-policy version when a material change requires renewed choice.