Cookies used on huntingtonmod.org
This page lists every cookie we set on your browser, with its category, its purpose, its duration and whether it is a first-party cookie. It also explains how to withdraw your consent at any time. HuntingtonMod is not affiliated with, endorsed by or connected to Huntington Bancshares Incorporated, Huntington National Bank, or Huntington Investment Company.
1 — What a cookie is
A cookie is a small text file that a website places in the local storage of your browser when you visit the site. When you come back, the browser sends the cookie back to the site, and the site remembers something about you — for instance, that you have signed in, or that you prefer the sepia theme. Cookies are not programs and cannot read anything else on your device.
2 — Our approach
HuntingtonMod GmbH takes the view that a Subscriber has come to write in a personal notebook, not to be tracked. Therefore this website uses only first-party cookies, in three narrow categories: (a) strictly necessary cookies without which the Workspace cannot open; (b) preference cookies that remember your language, theme and A5 paper choice; (c) one anonymous first-party analytics counter that records bucketed page views only. There are no third-party cookies, no advertising cookies, no cross-site trackers, no fingerprinting scripts, no session-replay scripts.
3 — Legal basis
Under §25(2) TTDSG (Germany), strictly necessary cookies (category "Essential") may be set without prior consent because they are indispensable for the service you requested. All other cookies (categories "Preference" and "Analytics") are only set after you have clicked "Accept preferences" in the cookie banner. Consent may be withdrawn at any time (see section 6).
4 — Full cookie inventory
| Name | Category | Purpose | Duration | Party |
|---|---|---|---|---|
ha_session | Essential | Keeps the Subscriber signed in to their Workspace during a single browser session. | Session (destroyed on browser close) | First-party |
ha_csrf | Essential | Cross-site request forgery token bound to the Workspace session. | 2 hours | First-party |
ha_magic_nonce | Essential | One-time nonce for the Magic-Link authentication flow. | 30 minutes | First-party |
ha_locale | Preference | Remembers the language chosen at checkout (de-DE, en-DE, fr-FR, it-IT, es-ES). | 12 months | First-party |
ha_theme | Preference | Remembers whether the sepia notebook or the vellum theme is active. | 12 months | First-party |
ha_a5_paper | Preference | Remembers the last A5 export paper size choice (A5, half-letter, custom). | 6 months | First-party |
ha_consent | Essential | Stores the Subscriber’s current cookie-banner choice for essential-vs-preference cookies. | 12 months | First-party |
ha_analytics_bucket | Analytics | Anonymous first-party rotating page-view counter, never linked to any user identifier. | 24 hours | First-party |
ha_analytics_page | Analytics | Records the bucketed path of the page currently rendered, for aggregate traffic counts only. | 24 hours | First-party |
ha_return_to | Preference | Stores the last catalog category so a returning visitor lands on the same page. | 30 days | First-party |
5 — What we do not set
The following categories of cookies and trackers are never used on huntingtonmod.org: Google Analytics; Google Tag Manager; Meta / Facebook Pixel; LinkedIn Insight Tag; TikTok Pixel; Hotjar or any session-replay tool; any advertising DSP; any A/B-testing pixel that identifies the user; any cross-site advertising identifier. If your browser extension detects any such tag, please write to dpo@huntingtonmod.org and we will investigate within twenty-four hours.
6 — Withdrawing consent
You can withdraw your consent at any time in three ways: (i) click the "Cookie preferences" link in the site footer to reopen the banner; (ii) delete the ha_consent cookie from your browser's local-storage panel, which will present the banner again at your next visit; (iii) block all non-essential cookies in your browser's settings. Withdrawing preference cookies means the theme, language and A5 paper size will reset to defaults. Withdrawing analytics cookies has no visible effect for you.
7 — Browser-level controls
All modern browsers let you review and delete cookies through a settings screen. Common paths: Firefox → Preferences → Privacy & Security → Cookies; Chrome → Settings → Privacy and security → Cookies; Safari → Preferences → Privacy → Manage Website Data. HuntingtonMod respects the "Global Privacy Control" (GPC) header where it is sent and treats it as an equivalent of withdrawing consent to analytics cookies.
8 — Analytics processing
Our first-party analytics counter records only two facts: (i) the bucketed path of the page (for example /catalog or /products/*, never the actual product id), and (ii) whether the visit is new or returning within twenty-four hours. It never records IP addresses, user agents, referrer URLs or any content of the Workspace. The counter aggregates numbers by day at midnight CET, then discards the raw rows.
9 — Retention of cookie data
The maximum lifetime of any cookie set by huntingtonmod.org is twelve (12) months. Session cookies are destroyed when you close your browser. The ha_magic_nonce cookie is destroyed after thirty (30) minutes at the latest. Analytics cookies are rotated every twenty-four (24) hours.
10 — Local storage and IndexedDB
The Workspace uses browser local storage for two draft-recovery keys: ha_draft_journal (auto-saved current journal entry, cleared on save) and ha_draft_receipt (photograph awaiting upload, cleared on upload). Neither key is transmitted to the server as long as it remains in local storage. No IndexedDB is used.
11 — Do we sell or share cookie data?
No. HuntingtonMod GmbH does not sell, rent, share, disclose, transfer or trade cookie data to or with any third party for any purpose. No advertising partner receives cookie data because there is no advertising partner. HuntingtonMod is not affiliated with, endorsed by or connected to Huntington Bancshares Incorporated, Huntington National Bank, or Huntington Investment Company, and no cookie data leaves our EU infrastructure.
12 — Changes to this cookies policy
The list of cookies is reviewed on the last Friday of every calendar quarter by the Data Protection Officer and re-published on this page. Substantive additions (a new preference cookie, a new analytics counter) are announced with fifteen (15) days' advance notice by e-mail to active Subscribers.
13 — Contact
For any question about our cookies, write to dpo@huntingtonmod.org. If your question is about a specific cookie you have detected in your browser, please include the exact cookie name and expiry — our DPO will investigate and respond within five (5) working days. Once more, HuntingtonMod is not affiliated with Huntington Bancshares.