Essential session
The heartland_session cookie links your browser to a guest session or account. It is HTTP-only, SameSite=Lax, lasts up to 30 days and is Secure on HTTPS. The cookie contains a random opaque identifier; the server stores its digest. This supports sign-in, saved settings and CSRF protection.
Your consent choice
The heartland_consent cookie stores a versioned choice about optional analytics for 180 days. You can accept, reject or change that choice from the separate Cookie Preference Centre, linked in the footer. Essential session behavior does not depend on accepting analytics.
Optional analytics
No analytics tag is active unless the product's measurement identifier is configured. When enabled, the Google loader remains in the initial HTML head with denied-storage defaults, and page measurement waits for accepted Analytics consent. Private account and authentication pages are excluded. Withdrawing consent stops future measurement.
Browser controls
Your browser can remove cookies or block storage. Removing the essential session cookie signs you out and may prevent recovery of guest-only preferences. Use Cookie Preferences for an optional-storage choice without deleting your account session.