3. Your controls
Use the “Cookie preferences” link in the footer (or the button below) to turn each non-essential category on or off. Your choice is stored in a single cookie (hl_cookie_consent) for one year.
You can also clear cookies in your browser settings — we will re-prompt on your next visit. Browser-level Do Not Track and Global Privacy Control signals are respected as a default refusal of non-essential categories.
4. Third-party cookies
Stripe sets cookies during checkout and KYC for fraud prevention; these are classed as strictly necessary on payment pages. Google Analytics 4 is loaded only with analytics consent. GA4 sets first-party `_ga` cookies to count returning visitors; we run it with IP-anonymisation enabled and never link analytics data to individual accounts. Revoking analytics consent both stops further beacons and clears the `_ga` cookies from this browser.
The chat assistant is provided by Faloor and loads only with preferences consent. It stores its own identifiers in your browser (under widget.faloor.com) so a conversation survives a page reload — the entries are listed in the table below. If you are signed in, we also pass Faloor your name, email address and phone number, together with a signature that proves the claim came from us rather than from your browser; that signature is what stops anyone else typing your email address to reach your conversation history. Withdrawing preferences consent unloads the widget.
We do not load Facebook Pixel or any cross-site advertising tag without explicit marketing consent. The marketing category is currently inactive on the public marketplace; it is reserved for future stallion campaign measurement.
5. Retention
Session cookies expire when you close the tab. Persistent cookies live as long as the table below indicates — at most one year. The consent record itself is reset on a major version bump (re-prompt) so revoked categories take effect.
6. Changes to this policy
If we add a new category — for example, a future stallion-comparison preferences cookie — we will bump the consent version and ask again. Material changes are also notified via email to account holders.
Categories at a glance
- Strictly necessaryAlways on
Authentication, escrow audit trail, fraud prevention. The threads holding the saddle on.
session, CSRF token, anti-bot, escrow ledger, hl_anon (90-day anonymous correlation ID used for security event stitching under Art. 6(1)(f) legitimate interest).
- Preferences
Remembers your locale, currency and recently viewed horses so the page feels yours.
currency selector, region, sort order, last-viewed.
- Analytics
Anonymised usage so we know which pages earn their keep. No cross-site tracking.
Google Analytics 4, Vercel Analytics.
- Marketing
Helps us measure stallion ad campaigns. Off until you say otherwise.
conversion pixels, retargeting tags.