Cookies and browser storage
CleaningHQ sets no cookies. It stores two things in your browser, and only one of them without asking.
No cookies at all
Not strictly-necessary ones, not analytics ones, not advertising ones. CleaningHQ is a static site with no accounts and no sessions, so there is nothing for a cookie to do.
This stays true with measurement switched on. Google Analytics normally sets a _ga cookie that recognises a browser for two years; here it is configured with client storage turned off and handed the same per-tab value described below instead. It therefore sets nothing, keeps nothing, and cannot recognise you on a later visit.
The banner you may have seen is a genuine choice about measurement, not the usual notice about cookies that have already been set.
What is stored in your browser
Two values in localStorage, which is storage the site can read but never transmits by itself. Nothing is sent anywhere unless you have agreed to measurement.
| Key | What it holds | Set when |
|---|---|---|
cleaninghq.analytics-consent | Your answer to the measurement question: granted or denied. Nothing else. | Only once you answer it. |
cleaninghq.session-id | A random value that lets a handful of page views be grouped into one visit. It is not linked to you, to a device fingerprint, or to any other site. | Only if you have agreed to measurement. |
Before you answer
Nothing is stored and nothing is sent. An undecided reader is treated exactly as one who declined. If your browser blocks storage entirely, CleaningHQ treats that as a refusal and works normally — every page is static and none of the content depends on measurement.
Changing your mind
Use the banner, or clear site data for this domain in your browser settings. Both remove the stored values completely.
Third parties
One, and only if you agree to measurement: Google Analytics. Its script is requested from Google when, and not before, you choose Allow. Declining or ignoring the banner means it is never requested at all.
Beyond that there are none — no advertising networks, no embedded video, no social widgets, no font CDN. Advertising signals and personalisation are refused in the configuration rather than left at their defaults. The content security policy names the only origins the site may contact, so anything else could not run even if it were added by accident.
What reaches Google is the same typed, anonymous event described on the privacy page: a page family, catalogue identifiers such as polished-marble, and counts. Addresses are sent with the query string removed, so a search you typed cannot travel in the page URL.
Questions: privacy@hekno.co.uk. See also Privacy.