Cookie Policy

Last updated: April 2026

This Cookie Policy explains how HDE (HDetailEnterprise), located at bul. "Dunav" #1, Plovdiv, Bulgaria, uses cookies and similar technologies on the Platform at hde.dev. This policy should be read alongside our Privacy Policy.

1. What Are Cookies

Cookies are small text files that are placed on your device by websites you visit. They are widely used to make websites function correctly, to improve efficiency, and to provide information to site operators. Local storage and session storage are similar browser-based technologies that allow websites to store data on your device.

2. Cookies We Use

The HDE Platform uses essential cookies that are strictly necessary for the operation of the website. When analytics are enabled and you have provided consent, additional non-essential cookies may be set.

2.1 Authentication Session Cookie

Name: next-auth.session-token. Purpose: Maintains your authenticated session after you log in. This cookie contains a signed JSON Web Token (JWT) that identifies your account. Type: Essential, HTTP-only, Secure (in production). Duration: Session-based (expires when you close your browser or after the session timeout).

2.2 CSRF Protection Cookie

Name: next-auth.csrf-token. Purpose: Protects against cross-site request forgery attacks on authentication forms. Type: Essential. Duration: Session-based.

2.3 Authentication Callback Cookie

Name: next-auth.callback-url. Purpose: Stores the redirect URL during the authentication flow so you are returned to the correct page after login. Type: Essential. Duration: Session-based.

2.4 Language Preference Cookie

Name: NEXT_LOCALE. Purpose: Stores your preferred language (English or Bulgarian) so the Platform displays content in your chosen language. On your first visit, this may be set automatically based on your detected country. Type: Functional, essential for bilingual operation. Duration: Persistent (1 year).

2.5 Workspace Portal Session Cookie

Name: hde-workspace-token. Purpose: Maintains the authenticated session for internal employees using the workspace portal. This is a separate authentication system from the main Platform. Type: Essential, HTTP-only. Duration: 24-hour inactivity timeout.

2.6 Google Analytics Cookies (When Consent Is Granted)

Names: _ga (unique visitor identifier) and _ga_[container-id] (session state). Purpose: These cookies are set by Google Analytics to distinguish unique users and manage session data for anonymised usage analytics. They are only placed after you explicitly opt in through our consent mechanism. Type: Non-essential, analytics. Duration: _ga - 2 years; _ga_[container-id] - 2 years. These cookies may be blocked or deleted at any time through your browser settings without affecting core Platform functionality.

3. Local Storage and Session Storage Items

In addition to cookies, the Platform uses browser local storage and session storage for the following purposes. These are not cookies under the ePrivacy Directive but are disclosed here for transparency:

  • hde-theme: Stores your selected visual theme preference (e.g., dark-pro, light-pro, or a custom theme identifier). This is necessary for rendering the interface in your chosen appearance.
  • hde-cart: Stores shopping cart contents for guest (unauthenticated) users. This data is synchronised to the server when you log in and is cleared from local storage after synchronisation.
  • hde_cookie_consent: Records your acknowledgement of this Cookie Policy so the information banner is not shown repeatedly.
  • hde_consent: Records your analytics consent preference (granted or denied). This is used to determine whether analytics scripts should be loaded. This value is only set when analytics are available on the Platform.
  • Session storage (chunk-reload): Temporarily stores page recovery data to prevent infinite reload loops after Platform updates. This data is automatically cleared when you close the browser tab.

4. Third-Party Cookies

Stripe, our payment processor, may set cookies during the checkout and payment process. These cookies are necessary for Stripe to securely process your payment and are governed by Stripe's own cookie policy. When Google Analytics is enabled on the Platform and you have provided consent, Google may set cookies to collect anonymised usage data. No third-party advertising, social media tracking, or marketing cookies are used.

5. Analytics

When analytics are enabled on the Platform, we use Google Analytics to collect anonymised data about how the Platform is used. Google Analytics sets two cookies: _ga (a unique visitor identifier, 2-year duration) and _ga_[container-id] (session state, 2-year duration). These analytics cookies are classified as non-essential and are only activated after you provide explicit consent through our consent mechanism. The consent preference is stored in your browser (hde_consent). If you grant consent, the analytics script is loaded on the next page view. If you deny or withdraw consent, no analytics cookies are set and no analytics data is collected. You can change your consent preference at any time by clearing the hde_consent value from your browser's local storage.

6. Consent

Under the EU ePrivacy Directive (2002/58/EC) and its Bulgarian transposition, strictly necessary cookies do not require user consent. Essential cookies used by the Platform (authentication, security, language preference, workspace portal session) are set without prior consent as they are required for basic functionality. Non-essential cookies (such as analytics) require your explicit opt-in consent before being placed. We provide a consent mechanism for this purpose.

7. How to Manage Cookies

You can manage or delete cookies through your browser settings. Most browsers allow you to block or delete cookies. However, please be aware that disabling essential cookies will prevent you from logging in and using authenticated features of the Platform. Instructions for managing cookies vary by browser. Consult your browser's help documentation for guidance.

8. Changes to This Policy

We may update this Cookie Policy from time to time. Changes will be reflected in the "Last updated" date at the top of this page. Material changes will be communicated through the Platform.

9. Contact

If you have questions about our use of cookies, please contact us at:

  • Email: info@hdetailenterprise.com