Cookie Policy

The short version

We use a small number of cookies: the ones the site and app need to function, analytics that tell us what’s working so we can improve it, and advertising measurement (Google, Meta and Reddit) that tells us whether our own ads work. We don’t sell your data, and you can accept or decline the non-essential ones at any time.

What cookies are

Cookies are small text files a website stores in your browser. They let the site remember things — that you’re logged in, what you had in a form, whether you’ve been here before. Similar technologies (local storage, pixels) get lumped in under “cookies” here too.

Cookies we use

Essential (always on)

These make the site and app work. Without them you can’t log in, stay logged in, or pay an invoice securely.

• Authentication/session cookies — keep you signed in to Handl.
• Security cookies — CSRF protection, fraud prevention.
• Stripe cookies — set when a payment form loads, used by Stripe for secure payment processing and fraud prevention. See Stripe’s own cookie policy for detail.

Analytics (optional)

These tell us how the site and product are used — which pages help, where people get stuck — so we can make it better.

• PostHog — product and site analytics: page views and feature usage, so we can see what’s working and where people get stuck. Stores its identifiers under our own domain.
• Google Analytics 4 — site traffic, referral source, and rough geography. Aggregate trends, not profiles for sale; sets_ga cookies.

Marketing (optional)

So we don’t waste money advertising to the wrong people.

• Meta (Facebook) Pixel — measures how our ads on Facebook and Instagram perform and helps us reach similar people. Sets a_fbp cookie, and only loads if you accept non-essential cookies.
• Google Ads and Reddit Ads tags (via Google Tag Manager) — measure whether people who clicked our ads signed up or got in touch. They only fire if you accept non-essential cookies. When you submit a form, we pass the email you gave us to these tags (hashed) so the ad platform can match the sign-up to the ad.

Ad attribution (first-party, always on)

If you arrive from an ad or a link with tracking tags in the address, we remember them for 30 days so we know which ad brought you when you sign up. These are set by us on handl.works and read only by Handl; they are not sent to ad platforms by themselves.

• handl_rdt_cid, handl_fbclid, handl_gclid— the click ID from a Reddit, Meta or Google ad.
• handl_utm— the campaign tags on the link (source, medium, campaign, content, term).

Preferences

Small conveniences — remembering UI choices like a dismissed banner or a saved view.

What we don't do

• No selling your data — ever.
• No ad-network tracking beyond measuring our own ads (Google, Meta and Reddit) — and only if you accept it.
• No fingerprinting tricks to follow you after you’ve said no.

Managing cookies

• Cookie banner:where consent applies (e.g. EU/UK visitors), you can accept or decline non-essential cookies when you first visit, and change your choice any time via the “Cookie settings” link in the footer.
• Your browser:every major browser lets you block or delete cookies. Blocking essential cookies will break login and payments — that’s not us being dramatic, it’s how sessions work.

Changes

If we add a new category of cookie or a new analytics provider, we’ll update this page and, where consent applies, re-ask.

Contact

Questions: privacy@handl.works or the contact form.