We use a small number of cookies and similar browser-storage technologies. This page lists them all, what they do, and how to control them.
Essential cookies
These are necessary for the site to function. Without them, you can't sign in or complete a purchase.
hkc_session- your encrypted sign-in token. HttpOnly, Secure, SameSite=Lax. Expires after 30 days of inactivity.hkc_session_present- a small marker cookie that tells the front-end whether you're signed in, so we can skip unnecessary auth checks. Contains no personal data.- Stripe cookies - set by our payment processor during checkout to prevent fraud. See Stripe's cookie policy.
Functional storage (localStorage)
These are stored on your device to improve your experience. They don't travel to our servers.
- Recently viewed files- so the "Recently viewed" row on the homepage works. Contains file IDs only.
- Dismissed announcements- so messages you've dismissed don't come back.
Analytics cookies
We use Vercel Analytics and Vercel Speed Insights, which track page-load performance and aggregate visit counts. Data is anonymized and aggregated; we don't receive identifiable personal data from these tools. See Vercel's privacy policy.
We also use Plausible Analytics when a domain is configured. Plausible is cookie-less by design, does not track users across sites, and collects no personally identifiable information.
Cookies we do NOT use
- No advertising cookies
- No third-party tracking pixels (no Facebook Pixel, Google Ads, etc.)
- No cross-site behavioral tracking
Your controls
You can clear cookies and localStorage at any time in your browser settings. Clearing session cookies will sign you out. Clearing localStorage will reset "recently viewed" and re-show any announcements you'd dismissed.
To opt out of essential cookies entirely, you'd need to stop using the site (they're how it works).
More information
For the full picture of how we handle your data, see our Privacy Policy.