Cookie policy

Last updated: 2026-09-29

Horus uses necessary cookies and, only with your permission, optional technologies for analytics, advertising and support. These choices are independent. Rejecting optional cookies does not prevent use of the main service.

1. Who is responsible

Isaac Hernández Miranda, Horus. support@joinhorus.com. Identification and data-protection rights: Privacy policy.

2. Necessary technologies

  • Auth.js: __Secure-authjs.session-token, authjs.session-token, __Host-authjs.csrf-token, authjs.csrf-token, authjs.callback-url. Authentication and request security. Session tokens expire after up to 30 days, subject to renewal or earlier invalidation. CSRF and redirect cookies follow the authentication session.
  • horus_consent: Horus, 180 days. Stores your choices, policy version, date and a random receipt reference. The server stores a minimal consent receipt, without adding your IP address, email or advertising identifier.
  • Language, theme and navigation preferences: first-party preferences used to remember the interface you request. A temporary sessionStorage flag may display a failed preference-save notice.
  • Cloudflare Turnstile: Anti-bot verification when registering. Technical verification may use temporary browser storage; this is not advertising consent. Cloudflare.
  • Stripe: Payment and fraud-prevention technologies on Stripe Checkout or the customer portal, when you open those services. Stripe.

3. Optional analytics

Google Analytics 4: Measures visits to selected public pages. Cookies _ga and _ga_* are configured for 180 days without automatic expiry extension. It receives technical connection data and a public page reference, not project names, uploaded files or private dashboard URLs. No analytics script is loaded until you enable Analytics. Google.

4. Optional advertising and attribution

  • Google Ads: Measurement of advertising activity on public pages. May use _gcl_* cookies, generally up to 90 days, and provider-domain cookies depending on browser settings. Google cookie inventory.
  • TikTok Pixel: Advertising measurement on public pages. TikTok documents _ttp, ttcsid, ttcsid_* and ttclid, with a duration of up to 13 months from their last use; third-party cookies may also be used. TikTok may use collected data for advertising under its own terms. TikTok.
  • horus_ref: First-party sessionStorage, for this browsing session only. Stores a campaign/source label for registration attribution, only when Advertising is enabled.

5. Optional support chat

Crisp: Only loads when you enable Support. Its crisp-client/* cookies preserve the conversation; the configured maximum is 180 days. If you are signed in, the chat may receive your name, email and role, together with messages you choose to send. Project names are not automatically supplied. Crisp.

6. Choice, withdrawal and international processing

Use Accept all, Reject non-essential or Configure. Optional purposes are off by default. You can reopen Cookie preferences at any time. Saving reloads the page to stop previously loaded integrations; save unfinished work first. On withdrawal, Horus stops future optional processing and removes applicable cookies accessible on its domain. Cookies on other domains must be managed in your browser. Withdrawal does not undo previous processing or itself erase data already held by providers.

Google and TikTok may process information outside the EEA. Their privacy and international-transfer information is available through the provider links above. A provider's country of incorporation alone does not determine where data is processed. Updated provider contracts and safeguards are part of Horus's privacy review.

A new choice is requested when the consent version or purposes change. Optional services stay off until a current choice is recorded. You can also delete cookies and site storage through your browser.