Handlet — Cookie Policy
Applies to: handlet.ai and related Handlet websites and applications.
This Cookie Policy explains how Handlet uses cookies, local storage, and similar technologies when you use our platform. It should be read alongside our Privacy Policy and Terms of Service.
Some cookies may store a unique identifier but do not directly identify you.
1. What are cookies?
Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. Local storage is another browser storage technology that can remember choices in your browser. These technologies are widely used to make websites work properly, remember your preferences, and understand how the site is used.
Handlet uses cookies and similar storage where necessary to provide the service, remember choices you make, attribute a sign-up referral, and keep you signed in. We follow UK GDPR and the Privacy and Electronic Communications Regulations (PECR) and use clear, plain language about what we do.
2. Cookies used by Handlet
We use cookies for:
- Keeping you signed in — So you can use the Handlet app without logging in again on every page.
- Remembering your preferences — Such as language and theme (light/dark mode), essential for your experience of the service.
- Remembering interface choices — Such as whether the sidebar is open or closed, so the app behaves the way you left it.
We do not use cookies for advertising or to track you across other websites. We do not sell cookie data to third parties.
If analytics or other non-essential cookies are enabled, we request consent before loading them. Rejecting optional cookies does not prevent you from using the service.
3. Strictly necessary cookies
These cookies are essential for the website and app to function. They enable core features such as signing in and staying signed in. You cannot turn these off if you want to use Handlet.
| Purpose | Typical name(s) / description | Duration | Type |
|---|---|---|---|
| Authentication | Session cookies set by our authentication provider (e.g. Supabase) to keep you signed in. | Session or as needed for security | Strictly necessary |
| Request security | csrfSecret, an HTTP-only anti-forgery secret used to protect forms and server requests. | Session or short security period | Strictly necessary |
4. Preference cookies
These cookies remember choices you make, such as theme, language, sidebar state, or layout. They support interface customisation requested by the user. Some preference cookies may not be strictly necessary for the website to load, but they help the app work in the way you asked it to work.
| Purpose | Cookie name | Duration | Type |
|---|---|---|---|
| Theme preference | theme | 1 year | Preference |
| Language preference | lang | 1 year | Preference |
| Sidebar state | sidebar:state | 7 days | Preference |
| Layout preference | layout-style | Session or as set | Preference |
| Cookie choice | cookie_consent_status in local storage and a first-party cookie, with a server-side consent audit event where available | Up to 1 year or until cleared by the user | Preference / consent record |
| Sign-up referral | handlet_referrer_id | 30 days | Referral attribution |
Details:
- theme — Stores whether you prefer light, dark, or system-based appearance. Path:
/. SameSite: Lax. Set when you use or are offered theme preferences. - lang — Stores your chosen language for the interface. Path:
/. SameSite: Lax. Set when language preferences are available or selected. - sidebar:state — Remembers if the app sidebar is open or collapsed. Path:
/. SameSite: Lax. Set when you use the app sidebar. - layout-style — Remembers layout preferences within the Handlet app. Set when layout preferences are available or selected.
- cookie_consent_status — Stored in browser local storage and a first-party cookie to remember whether you accepted or rejected optional cookies and allow the server to respect that choice. Where available, Handlet also records a server-side audit event with the consent status and category state.
- handlet_referrer_id — A first-party, HTTP-only cookie used to remember a valid referral identifier after optional-cookie consent when you open the sign-up page from a referral link. It is not used to track you across websites.
5. Third-party services
Handlet is the data controller for the cookies we set. When you use parts of our service that involve third-party providers, those providers may set their own cookies. We only use providers that are necessary for the service and that meet our data protection standards.
Examples of where third-party cookies may be used:
- Authentication — Our authentication provider (for example Supabase) may set cookies to keep your session secure.
- Payments — Our payment provider (for example Stripe) may set cookies when you manage your subscription or complete a payment.
- Analytics — If enabled and accepted, analytics providers such as Google Analytics may set cookies or similar technologies to help us understand product usage. Analytics consent is recorded separately from necessary cookies.
- Marketing trackers — Handlet does not currently use marketing or advertising trackers. If this changes, we will add a separate marketing consent category before loading them.
- Security checks — If enabled, anti-abuse providers such as Cloudflare Turnstile may use cookies or similar technologies to verify that forms are not being abused.
- Reliability monitoring — Sentry may receive minimised error and performance events where configured. We treat this as strictly necessary reliability and security telemetry, not optional analytics or marketing. Handlet's current configuration disables session replay, browser and server profiling, console-log capture, Sentry log ingestion, and default personal-data collection.
Details of how we share data are in our Privacy Policy. We do not use third-party advertising or tracking cookies on Handlet.
6. How to control cookies
You can reopen the consent banner at any time using Cookie settings in the website footer. You can also control or delete cookies through your browser settings. Most browsers let you:
- Block all cookies.
- Block only third-party cookies.
- Delete existing cookies.
If you block or delete cookies or local storage, some parts of Handlet may not work (for example, you may be signed out, your theme and language may reset, or your cookie choice may need to be given again). Instructions for managing cookies are usually found in your browser's "Help" or "Settings" section, or on sites such as allaboutcookies.org.
7. Updates
We may update this Cookie Policy from time to time to reflect changes in our use of cookies or in law. When we make changes, we will update the “Last updated” date at the top. We encourage you to review this page periodically.
8. Contact
If you have questions about our use of cookies or this policy, please contact us:
- Email: privacy@handlet.ai or support@handlet.ai
- Website: https://handlet.ai
For more on how we process personal data, see our Privacy Policy and How we process personal data.