Cookie & Browser Storage Notice

Essential storage on Huck

Huck uses first-party session and request-security cookies where needed to keep you signed in, protect forms against cross-site request forgery and remember the current authenticated interaction. Session cookie names can differ by environment. The normal console session has a two-hour idle lifetime; authentication choices and security settings can affect when it ends. A security cookie can have a different lifetime from the server-side session it protects.

These functions are necessary for the requested account and form features. Blocking them can prevent sign-in or submissions. You can remove cookies using your browser controls; doing so may sign you out. We do not treat browsing as consent to optional marketing storage.

Analytics and advertising

The Huck marketing site does not currently load advertising pixels or optional behavioral-analytics trackers. Fonts and site assets are served through our hosting infrastructure. Essential server logs can still include technical request information as described in the Privacy Notice. If optional tracking is introduced, the notice and any required consent controls must be updated before it is enabled.

Embedded chat and third parties

An embedded assistant runs on the customer’s website. That website may use its own cookies, storage, identity system or analytics; its operator must explain those practices. Huck’s chat API uses scoped session credentials, and a customer’s integration may retain its own session state. Do not assume every website containing a Huck-powered assistant has the same storage behavior as huck.chat.

Stripe’s hosted payment and portal pages use Stripe’s own security, fraud-prevention and other technologies under its notices. Opening an external provider’s page is subject to that provider’s practices. See the Subprocessors page for current provider links.