Cookies

1. What this site sets

A session cookie (humsess). Set when you load a page containing the contact form. It carries the CSRF token that protects the form against cross-site request forgery. It is HttpOnly, SameSite=Lax, Secure over HTTPS, and expires when you close your browser. It is strictly necessary, and carries no identifier that could be used to track you.

That is the only cookie this site sets.

2. Analytics cookies

None. Analytics is disabled.

If analytics is enabled in future, a consent banner will appear, and no analytics script will load and no analytics cookie will be written until you accept it. A decision to decline is remembered in a first-party cookie (hum_consent) so that you are not asked again.

3. Third-party cookies

None. The site loads no external scripts, fonts, or images, and its Content-Security-Policy prevents any request to another host.

4. Managing cookies

Because the only cookie is strictly necessary, there is nothing to opt out of. You can block or delete cookies in your browser settings; blocking humsess will prevent the contact form from working.

5. Changes

We may revise this policy. The revision date is shown at the foot of this page.

Last updated 10 Jul 2026.