Cookies

A cookie is a small piece of data a website stores in your browser. Cookies let a site remember things between page loads — on HomeReady they are used to keep you signed in and to complete secure payment checkout.

Some cookies are set by HomeReady, and some are set by other services we use to run the site (for example, Supabase for authentication or Stripe for payments).

Authentication (Supabase). When you log in, Supabase Auth sets a secure, HTTP-only cookie that identifies your session. Without it, the site can’t tell who you are, and you’d have to log in on every page. The cookie expires when you log out or when your session ends.

Payment checkout (Stripe). Stripe may set short-lived cookies on its checkout pages when you start a payment. These are controlled by Stripe and used to keep checkout secure. HomeReady doesn’t set or read these cookies directly.

HomeReady advertises on Google. If you agree, Google Ads sets a cookie in your browser so we can see which adverts actually lead to someone using HomeReady — otherwise we have no way of telling which advertising is worth paying for.

This is not set unless you accept it. Until you make a choice, Google’s tag runs with advertising storage switched off, and no advertising cookie is written. If you reject, none is written at all.

You can change your mind at any time using the “Cookie preferences” link in the footer of every page.

We don’t use Google Analytics, social-media tracking cookies, or fingerprinting techniques.

We don’t sell or share your browsing data with advertising networks, and we don’t use cookies to build a profile of you across other websites.

We count how our tools are used — how many times a step is reached, a question answered or a field changed — so we can see where people get stuck. These usage statistics never include what you type or choose, and carry no identifier. Nothing is stored in your browser for them, so they work without a cookie. You can still switch them off under “Usage statistics” in Cookie preferences; that choice is kept in the hr_consent cookie described below.

If you have an account, you can choose to keep an activity history in Account settings. It is off unless you switch it on. When it is on, the same kind of steps and fields are linked to your account ID (never your email) and kept for 90 days, and PostHog (EU-hosted, in Frankfurt) links the pages you view to your account. Switching it off deletes the step-and-field history we hold; it doesn’t remove page views PostHog has already recorded. PostHog runs in memory only: it sets no cookies and writes nothing to your browser’s local or session storage.

We never send free-text notes (for example, the body of a support request) to PostHog, and we do not record session replays. Vercel Web Analytics and Speed Insights count page visits and page speed for every visitor, without cookies.

Under UK PECR and ICO guidance, strictly-necessary cookies — those essential to something you explicitly asked for, like logging in or paying — don’t need consent. Advertising cookies always do.

So you get a banner with two equally weighted options: Accept or Reject all. “Reject all” switches off both advertising cookies and usage statistics; it is exactly as easy as accepting, and it doesn’t limit anything you can do on the site. “Manage preferences” shows each category and what it actually sets.

Nothing non-essential is stored before you choose. We use Google Consent Mode, so Google’s tag loads with advertising storage denied by default, and it is only granted if you accept.

Usage statistics store nothing in your browser either, so they would not need consent. You get a switch for them anyway, so you can object easily: it is on unless you turn it off.

“Accept” turns advertising cookies on and leaves usage statistics as they are; “Reject all” switches both off. You can change either at any time in Cookie preferences, which you can open from the banner’s “Manage preferences”, from the site footer, and from under each of our tools and Get started.

Your choices — advertising, and whether usage statistics are on — are remembered for six months in a cookie called hr_consent. That cookie is itself strictly necessary: without it we couldn’t honour the decisions you made.

Most browsers let you view, clear, or block cookies from their settings: Chrome, Firefox, Safari, and Edge all have a Privacy or Cookies section where this is handled.

If you clear HomeReady’s cookies you will be logged out. If you block cookies entirely, you won’t be able to log in or complete a payment.

When you use Stripe’s payment checkout page, Stripe sets its own cookies under its own policy. You can read Stripe’s cookie policy at https://stripe.com/cookies-policy/legal.

HomeReady doesn’t use any other third-party cookies.

This page will be reviewed and updated as HomeReady evolves. If we make material changes to which cookies are set, we’ll update this page before those changes take effect.