Security cookies
Cloudflare may set __cf_bm to distinguish human traffic from automated traffic and protect the website against abuse. According to Cloudflare’s documentation, this cookie expires after thirty minutes of continuous inactivity.
Cloudflare may also set cf_clearance to remember the outcome of its security checks. Its lifetime depends on the security configuration; you can inspect its expiry date in your browser settings. Their presence varies with the protections triggered during a visit. Heumix does not use them for advertising.
Hosting visitor cookie: blocked
Since 21 October 2026, Heumix has applied a Cloudflare filter on heumix.com to block the __Host-appgarden-visitor cookie issued by the hosting layer. The filter removes instructions that would set this cookie before the response reaches your browser.
If the cookie is already present, its value is removed from requests sent to the hosting service. The next HTTPS response handled by the filter also tells your browser to expire it. Removing this browser cookie does not erase any data already held server-side.
This filter applies only to heumix.com. It leaves security cookies unchanged and does not apply to app.heumix.com or other domains.
Advertising and language choice
The website code includes no advertising pixel or marketing tracker. Your language choice is carried in the page address and is not used to track your browsing.
Campaign links
Campaign parameters from a link may stay in the address of Heumix pages and accompany a form you choose to submit. This attribution sets no cookie, uses no browser storage and creates no individual identifier. Do not include personal data in these parameters.
Your choice to dismiss the founding-offer banner
When you dismiss the founding-offer banner, the website keeps the value “closed” under the heumix-founder-banner-v2 key in the tab’s session storage (sessionStorage). This remembers your choice while you browse in the same tab.
The Heumix code does not send this value to the server or use it as a visitor identifier or for audience measurement. It is limited to the tab’s session; the browser may restore it when restoring that session. If session storage is unavailable, the banner may reappear on the next navigation.
Server-side statistics and data
The ChatGPT Sites hosting service provides traffic statistics, including visitor and page-view counts. Filtering the visitor cookie described above does not disable these statistics or any server-side technical logs.
This policy covers cookies and storage in your browser. Information about other processing of website data is set out in the privacy policy.
Managing browser data
Your browser settings allow you to inspect, delete or block cookies and site data. Blocking security cookies may trigger further checks or prevent some access. A security cookie allowed by your browser may be set again on a later visit.
These settings do not replace consent where it is required. Deleting browser data does not erase information that may be held server-side. For questions about your data, email [email protected].
Changes to this policy
This policy will be updated if the cookies, filtering or services used change. Introducing a tracker that requires consent will need appropriate information, an effective prior choice and a way to withdraw consent before it goes live.
