Cookie Policy
Last updated: July 9, 2026
We keep this short because our cookie usage is minimal.
What we use
Candor Host uses only cookies necessary for the website and client portal to function. We do not use advertising cookies. We do not use tracking cookies. We do not use social media pixels. We do not sell or share any information collected via cookies.
The specific cookies
On candorhost.com (marketing site)
We do not set any cookies on our marketing site under normal browsing. Some pages may set a strictly-necessary session cookie if you interact with a form.
On my.candorhost.com (client portal)
| Cookie | Purpose | Duration |
|---|---|---|
| Session ID | Keeps you signed in during your visit. | Session (deleted when you close your browser). |
| CSRF token | Protects against cross-site request forgery attacks. | Session. |
| Language preference | Remembers your interface language. | 1 year, if you set one. |
All portal cookies are essential to the operation of the service. Without them, you would not be able to log in.
On status.candorhost.com
Our status page is operated by a third-party status monitoring service. It may set essential session cookies. It does not use analytics or tracking cookies.
Analytics
We run analytics on candorhost.com, and none of it uses cookies.
Umami counts pageviews and referrers. It sets no cookies and no persistent identifiers, and it runs on our own server rather than a third party’s. A session recorder captures how visitors navigate the page — scrolling, clicks, where they move — and every form on the site is excluded from it, so nothing you type is recorded.
Neither tracks you across sites. Our Analytics Transparency page describes exactly what each one collects, how long we keep it, and how to verify all of it in your browser’s dev tools.
Campaign parameters we store in your browser
If you arrive here from one of our ads, the link carries campaign parameters — utm_source, utm_medium, utm_campaign, utm_content, utm_term. We keep those in your browser’s sessionStorage while you look around, and add them to the link if you go on to our billing portal. That is how we tell which ads bring us customers rather than just clicks.
Being exact about it:
- It is only those five parameters, and only ones we put in our own advertising links. We do not read or store
gclid,fbclid, or anything else a third party attaches. - It is
sessionStorage, not a cookie and notlocalStorage. It is scoped to that one browser tab, and the browser discards it when you close it. It cannot follow you between visits, and it cannot follow you to another site. - It contains no identifier for you. There is nothing in it that distinguishes you from anyone else who clicked the same ad.
- Nothing is stored at all if you arrive from a search engine, a link, or by typing the address.
You can see exactly what is there: open your browser’s dev tools, go to Application → Session Storage, and look for ch_attr.
If we ever add a cookie-based analytics tool, we will update this policy and add an opt-in mechanism.
Do Not Track and Global Privacy Control
We honor Do Not Track and Global Privacy Control signals the same way we treat all visitors — with no tracking. Sending these signals does not change our behavior because we already do not track you.
Managing cookies
You can control cookies through your browser settings. Blocking all cookies will prevent you from logging into your client portal. Blocking only third-party cookies has no effect on our first-party site.
Instructions for common browsers: Chrome, Firefox, Safari, Edge.
Changes
We will update this policy if we change our cookie usage. Any change will be reflected in the “Last updated” date at the top of this page.
Contact
Questions? Email legal@candorhost.com.