Cookie Policy.

Cookies are small text files a website stores on your browser to remember information between page loads. Some are essential for the site to function; others are optional and require your explicit consent before they're set.

This policy explains every category of cookie Hodor uses, what each one does, who sets it, and how you can change your choices at any time.

Under the EU General Data Protection Regulation (Article 6) and the ePrivacy Directive, we process strictly necessary cookies on the basis of legitimate interest — they are required for you to use the site safely. For every other category (analytics, third-party embeds), we process only on the basis of your explicit, opt-in consent, which you can withdraw at any time.

We do not use pre-checked consent boxes. We do not use cookie walls. Rejecting non-essential cookies never blocks access to the site.

Strictly necessary. Required for the site to work — session continuity in authenticated areas, CSRF protection, and the localStorage entry that remembers your cookie consent choice itself. These never need consent under GDPR. You cannot opt out of strictly-necessary cookies.

Analytics(opt-in). Privacy-respecting, aggregated usage statistics so we can see which pages help and which don't. No cross-site tracking. No third-party advertising cookies. No data is sold to third parties or used to target you with ads.

Third-party embeds (opt-in). Embedded content from our partners — currently the Cal.com booking calendar on the demo flow. When this consent is off, the calendar is replaced with a link to schedule via email so you can still book.

By Hodor (first-party): hodor.cookie-consent.v1 — localStorage entry recording your consent decision, version, and timestamp. Necessary. No expiry beyond browser data retention.

By Cal.com (third-party): when the booking calendar is loaded with consent, Cal.com may set its own functional cookies for booking flow continuity. See Cal.com's privacy policy for their full list.

We do not currently load analytics or advertising scripts. If we add a privacy-respecting analytics provider in the future, it will be disclosed here before any cookie is set, and your existing opt-out will continue to apply.

You can change your cookie preferences at any time from the “Cookies” link in the site footer. Changes apply immediately.

You can also clear all cookies and your consent record from your browser's privacy settings — the consent banner will reappear on your next visit, treating it as a fresh decision.

Under GDPR, you have the right to access, rectify, port, restrict, or erase any personal data we hold about you, to object to certain processing, and to lodge a complaint with a supervisory authority. To exercise any of these rights, write to contact@hodor.ai.

Hodor is hosted in France (EU). The cookie handling described here is designed to be GDPR-compliant by design and to align with our broader ISO 27001 and SOC 2 Type II posture, both of which are in progress. The audit log for cookie consent changes is maintained as part of the same evidence stream we use for customer infrastructure events.

See our Privacy Policy and Security posture pages for the full picture.

We may update this Cookie Policy when we add or remove cookies, or when relevant law or guidance changes. Material changes will re-trigger the consent banner — your previous choice is reset, so you can review it fresh.

For any cookie-related question, write to contact@hodor.ai.