Cookies and tracking.
Everything this site stores on your device, why, and how to stop it. Including the part that most sites describe as "analytics" and leave there.
Last updated 1 August 2026.
Cookies this site sets
- hc0_acctSet when you join. Holds the email address you typed and nothing else. It renders the header as signed in and prefills your address. It grants access to nothing. HttpOnly, Secure, expires after 400 days.
- hc0_cusSet only by a completed purchase. This is the one that reaches your subscription and your billing page. HttpOnly, Secure, expires after 400 days.
- hc0_refSet only if you arrive through a partner link (
hc0.ai/r/…). Holds one short name identifying the creator who sent you, so they can be paid if you buy something. Expires after 60 days. Not HttpOnly, not shared with anybody, and it identifies the partner — never you. - StripeSet on the checkout and billing pages by Stripe, for payment processing and fraud prevention. Governed by Stripe's own privacy policy.
There are no advertising cookies on this site. No Meta pixel, no Google Ads remarketing tag, no third-party ad network, and nothing that follows you off hc0.ai.
The analytics tag, described accurately
Every page carries one first-party analytics script, run on infrastructure we control, which records page views and form submissions so we can tell whether the site works.
It is worth being specific about how it identifies a visit, because "analytics" is doing a lot of work in most policies:
- It writes a persistent identifier to your browser's localStorage, which survives between visits.
- It derives a browser fingerprint from signals your device exposes — canvas rendering, screen properties and timezone among them.
That is device identification, not just counting. It is the category that generally requires consent under the GDPR and the ePrivacy rules regardless of whether a cookie is involved, and this site does not currently ask for that consent. It is written here plainly rather than described as "essential analytics", because calling it that would be the misleading part.
If you would rather not be identified this way, the section below stops it, and the site works without it.
How to refuse it
- Block the script. Any content blocker (uBlock Origin, Brave's shields, Safari's advanced protections) stops it. Nothing on this site breaks when it is blocked — the catalog, the forms and the checkout all work.
- Clear it. Clearing site data for hc0.ai removes the stored identifier and signs you out.
- Refuse the account cookie by simply not joining. Nothing on the site requires an account, including buying.
- Do Not Track is not honoured by most of the web and it is not honoured here either. Saying so is more useful than implying otherwise.
The billing cookie is the one exception worth naming: block or clear it and this browser can no longer reach your billing page directly. You can always get back in from the sign-in page.
What we do with it
Read it, to see which listings people open and where forms are abandoned. It is not sold, not shared with advertisers, not used to build a profile of you across other sites, and not fed into an ad platform.
What happens to the personal details you actually type — your email, your site, what you said you need — is covered on the privacy page.
Related
Privacy · Terms of use · Disclaimer · Billing and cancellation