← Legal hub

Herpegram Legal

Cookies

Cookies and similar technologies used for authentication, security, preferences and measurement.

Effective: 31 August 2026Version 1.0
This policy describes the intended beta architecture. Before launch, Herpegram must run a production cookie and SDK audit and replace category descriptions with the exact technologies, providers, purposes and lifetimes actually in use.

This Cookie Policy explains how Herpegram uses cookies and similar technologies on its website and, where relevant, its applications. A cookie is a small piece of information stored on or accessed from your device. Similar rules can apply to local storage, pixels, SDKs and comparable device technologies.

Herpegram will not treat continued browsing as consent to non-essential tracking. Where UK law requires consent, non-essential technologies should remain disabled until you make an affirmative choice.

1. Who this policy applies to

This policy applies when you visit or use Herpegram through a browser or other client that uses cookies or similar device storage. It should be read with the Privacy Policy.

2. Strictly necessary technologies

Some technologies are required to deliver a service you request or to transmit communications. Depending on the final production architecture, these may support authentication, session continuity, load balancing, fraud prevention, security, consent-state storage or other essential functions.

Where a technology is strictly necessary under applicable law, Herpegram may use it without consent. We will still provide appropriate information about it. A technology is not classified as necessary merely because it is useful to us.

3. Preference technologies

Preference storage may remember settings such as appearance, accessibility choices, language or interface preferences. Whether consent is required depends on the specific technology, purpose and applicable exemption. Production classification will be documented in the cookie register.

4. Analytics

Herpegram may use analytics to understand service performance, failures and aggregate usage. Analytics technologies that are not exempt from consent requirements will not be activated for a user until the required consent has been obtained.

Before production deployment, this section must identify the actual analytics provider, data collected, retention period and whether information is transferred outside the UK.

5. Advertising and behavioural tracking

Herpegram does not obtain permission to conduct behavioural advertising merely because a person accepts these Terms or opens an account. If advertising or cross-service behavioural tracking is introduced, any non-essential device access will be subject to the consent and transparency requirements then applicable.

Advertising cookies, social-media tracking technologies and comparable non-essential trackers must not be placed before valid consent where consent is legally required.

6. Authentication and security

Authentication may require session identifiers or similar storage so that Herpegram can recognise an authenticated session and protect it against misuse. Security technologies may also support rate limiting, abuse prevention, trusted-device functions and protection against unauthorised access.

Security data may also constitute personal data. Its processing is addressed in the Privacy Policy.

7. Local storage and similar technologies

The legal rules are not limited to files literally named cookies. Herpegram will treat local storage, device identifiers, pixels, SDK storage and other technologies that store or access information on a device according to their function and the applicable legal requirements.

8. Third-party technologies

Third-party infrastructure can cause third-party technologies to be used. Before public launch, Herpegram will maintain a register identifying relevant third parties, the technologies they set or access, their purposes and appropriate retention information.

A third party's involvement does not remove Herpegram's responsibility to provide appropriate information and obtain consent where Herpegram is responsible for that use.

9. Your choices

Where consent is required, the cookie interface should allow you to accept or reject non-essential categories without making rejection unnecessarily difficult. You should also be able to revisit and withdraw consent as easily as you gave it.

Withdrawing consent does not make earlier processing unlawful, but the relevant non-essential technologies should cease being used for the withdrawn purpose as required by law.

10. Browser controls

Browsers and operating systems may provide controls to delete or block stored information. Blocking strictly necessary storage can prevent login or other requested functions from working. Browser settings do not replace Herpegram's obligation to obtain valid consent where our use requires it.

11. Retention

Session technologies may expire when a session ends. Persistent technologies remain for a defined period or until removed. Herpegram will use periods proportionate to each purpose and publish the actual lifetimes in the production cookie register rather than inventing durations before the technologies are selected.

12. Changes to this policy

We may update this policy when technologies, providers or legal requirements change. If a change affects the scope of a consent previously given, we will obtain fresh consent where required.

13. Contact and complaints

Questions about cookies or similar technologies may be sent through Herpegram's privacy contact route once published. You may also have the right to complain to the Information Commissioner's Office about the use of personal data or technologies within its regulatory remit.