We keep this short because our cookie usage is genuinely small. Here's everything.
We set exactly one cookie: hl_portal_s.
| Purpose | Keeps you signed in after you use a magic-link sign-in email. Without it, the Portal can't tell it's you on the next page load. |
| Type | Strictly necessary — the Portal cannot function without it. No consent banner is required or shown for this cookie under UK PECR, because it's essential to a service you've asked for. |
| Lifespan | Session-based. It's cleared when you log out, and it expires automatically after a period of inactivity. Your session ID is periodically rotated for security while you're logged in. |
| Security flags | Secure, HttpOnly, SameSite=Strict — it can't be read by JavaScript, can't be sent over an insecure connection, and won't be sent on cross-site requests. |
| Third party? | No. It's set by HostLuma and read only by HostLuma. |
That's it. We don't set any other cookies on the Portal.
If that ever changes — for example, if we add analytics in future — we'll update this policy and add a cookie consent banner before any non-essential cookie is set, as required by law.
If you're a visitor to a website hosted on HostLuma (a customer's WordPress site or AI-hosted app), this policy doesn't apply to that site. Cookies set by a customer's website are chosen and controlled by that customer, not by us — check that site's own cookie or privacy policy. HostLuma provides the hosting infrastructure; we don't inject cookies into customer sites.
Because the only cookie we set is required for you to stay logged in, blocking it will simply log you out or prevent sign-in. You can still control cookies at any time through your browser settings if you'd prefer not to allow it.
We'll update the date at the top if anything here changes.
Questions about this policy: support@hostluma.co.uk
See also: Privacy Policy
© 2026 Host Luma. All rights reserved.