Last updated: 18 October 2026 · Corporate website
1. Our approach
This corporate website uses essential browser storage only. It does not load analytics tags, advertising pixels, social-media widgets, external font services or embedded third-party videos. There are no optional tracking categories to accept. The notice therefore offers acknowledgement and information rather than a misleading “accept all” choice.
2. What is stored
| Name | Type and purpose | Duration |
|---|---|---|
| hm_csrf | First-party, HttpOnly security cookie. Set when the contact form requests a token; helps prevent forged submissions. | 1 hour |
| hm_notice_v1 | First-party localStorage entry recording that you dismissed the cookie notice. Not sent to the server; contains only a version and timestamp. | 180 days, checked and removed on the next visit after expiry |
The security cookie is marked Secure in HTTPS production deployments and SameSite=Strict. Local development over HTTP is separately configured. The notice entry is written only after you choose to acknowledge the notice or save its settings.
3. Control your settings
Open “Cookie settings” in the footer at any time. “Clear notice preference” removes the local acknowledgement and shows the notice again. You can also remove cookies and local storage through browser controls. Blocking the contact security cookie prevents form submission; the direct email link remains available.
No third-party request is made simply because a link is displayed. If you follow a link to Gina or another site, that destination may use its own cookies and settings.
4. Future changes and contact
If optional technologies are introduced, this policy and the controls must be updated before they are activated, with a genuine choice where consent is required. The current version includes none. Questions can be sent to info@heartwingmedia.com. Read our Privacy Policy for information about enquiries and server-side processing.