Cookies

Most cookie banners exist because the site behind them is sending your browsing to somebody else. This one is not. There is no analytics package, no advertising pixel, no session recorder, no social embed, no chat widget and no third-party tag of any kind on this website.

Since the fonts moved onto this domain, loading a page here contacts no server except ours. You can check that in about ten seconds: open your browser’s network tab, reload, and read the list of hosts. It should say hshdesign.com and nothing else.

That is the whole list. Nothing else is written to your browser by this website.

The proofing platform at https://hshdesign.com/proof/ is a separate application, and signing into it does set cookies — because it cannot work otherwise:

• A session cookie, so the platform knows you are signed in. Regenerated when you sign in and again whenever your account’s privileges change, so an old session cannot be replayed.
• A trusted-device token, only if you confirm a device so it stops asking for a two-factor code. Random, held server-side against one user, http-only so scripts cannot read it, and it expires on its own after 45 days.

Both are strictly necessary for the service to function and neither tracks you anywhere. There is no analytics in the platform either.

Your customer approving a proof gets no cookie of consequence and no account at all — the link carries its own token, and that is the whole mechanism.

Independently of cookies, the web server keeps standard access logs: IP address, the page requested, the timestamp and the browser user-agent. This happens on essentially every website on the internet and is how a fault or an attack gets diagnosed.

We do not build profiles from them, do not join them to anything else, and do not archive them — the hosting platform rotates them on its own schedule, typically weeks rather than months.

Every browser lets you block or clear cookies and site data. Blocking them will not break anything on this website, because nothing here depends on one. It will sign studio staff out of the admin area, and it will make the platform ask for a two-factor code again on the next sign-in.

Clearing site data also forgets your theme choice, which is the only thing you will notice.

If we ever add something that tracks you — an analytics package, an embedded video, a live-chat widget — this page changes on the same day, and we will ask for consent properly rather than assuming it. We would not add one without a reason we could explain here.

Questions: hello@hshdesign.com. The privacy policy covers everything else.