Cookie Policy
HauliK is operated by Mat Mad LTD.
Last updated: 10 August 2026
Summary
HauliK uses strictly necessary cookies required to operate the platform securely. These are always on. We do not use advertising cookies, retargeting pixels, or cookies that track you across other websites.
We use Google Analytics, Vercel Web Analytics and Vercel Speed Insights only if you accept optional analytics using our consent controls. If you decline, those optional analytics scripts are not loaded.
Strictly necessary cookies are exempt from consent under UK PECR (Privacy and Electronic Communications Regulations). Analytics cookies are set only with your consent.
1. What Are Cookies?
Cookies are small text files that a website places on your device when you visit it. They help websites remember your preferences and keep you signed in between page loads. Similar technologies (such as local storage) may be used for the same purposes.
2. Cookies We Use
HauliK uses the following cookies or similar browser storage. Supabase and Stripe storage is strictly necessary. Google Analytics cookies are optional and can only be set after you accept analytics. Cookie names and lifetimes may vary by browser, provider configuration and consent choice.
| Cookie name / prefix | Set by | Purpose | Duration |
|---|---|---|---|
| sb-* (auth token) | HauliK / Supabase | Stores your encrypted authentication session so you remain signed in. | Session / up to 7 days |
| sb-* (refresh token) | HauliK / Supabase | Renews your session automatically so you are not logged out mid-shift. | Up to 7 days |
| __stripe_mid | Stripe | Fraud prevention during the Stripe payment checkout flow. | 1 year |
| __stripe_sid | Stripe | Links your browser session to a Stripe checkout attempt. | 30 minutes |
| haulik_cookie_consent_v2 (local storage) | HauliK | Strictly necessary preference storage that remembers your analytics choice, notice version and unsent evidence events. | Until changed, cleared, or removed under the published retention process |
| _ga | Google Analytics | Optional — set only if you accept analytics. Distinguishes unique visitors to measure website usage. | 2 years |
| _ga_* (e.g. _ga_VTWJT58VH6) | Google Analytics | Optional — set only if you accept analytics. Maintains the analytics session state. | 2 years |
The Stripe cookies are only set during a payment checkout session. If your organisation does not use paid subscription features, Stripe cookies will not be present.
3. Cookies We Do Not Use
We do not use:
- Advertising or targeting cookies
- Social media tracking pixels
- Cookies that track your activity across other websites
- Cross-site profiling or data brokering of any kind
Google Analytics advertising features and ad personalisation are switched off. It is loaded only after you accept analytics.
4. Legal Basis
Strictly necessary cookies (Supabase authentication and Stripe checkout) are exempt from consent requirements under the UK Privacy and Electronic Communications Regulations 2003 (UK PECR) and the UK GDPR, because they are essential to provide the service you have requested. Supabase authentication cookies maintain your login session; without them you would be signed out on every page load. Stripe cookies during checkout are required to complete payment securely and prevent fraud.
Analytics toolsare not strictly necessary. Under UK PECR they are set only with your prior consent, which we collect through the cookie banner shown on your first visit. If you decline, Google Analytics, Vercel Web Analytics and Vercel Speed Insights are not loaded. You can change your choice at any time — see “Managing Cookies” below.
5. Third-Party Processors
The following third-party services may set cookies on your device during use of the platform:
- Supabase Inc.— authentication and database provider. Processing locations and transfer terms depend on Supabase's service configuration and applicable provider terms. Supabase Privacy Policy: supabase.com/privacy
- Stripe Inc.— payment processing provider. Processing locations and transfer terms depend on Stripe's service configuration and applicable provider terms. Stripe Privacy Policy: stripe.com/gb/privacy
- Google LLC — website analytics (Google Analytics 4). Analytics cookies are set only with your consent. Data may be processed in the US under Standard Contractual Clauses. Google Privacy Policy: policies.google.com/privacy
- Vercel Inc. — optional aggregate website analytics and real-user performance measurements. These tools do not use analytics cookies and are loaded only after you accept analytics. Vercel Privacy Policy: vercel.com/legal/privacy-policy
These providers are listed in full in our Privacy Policy.
6. Mobile App
The HauliK Driver mobile app (iOS and Android) does not use browser cookies. Authentication in the mobile app uses secure device storage to hold session tokens. No tracking SDKs or advertising identifiers are used in the mobile app.
7. Managing Cookies
Analytics cookies are optional.When you first visit the website you can choose “Accept analytics” or “Decline” on the cookie banner. You can reopen “Cookie settings” from the footer of any public page or use the control below. Withdrawing analytics consent changes only optional analytics: it does not sign you out or clear the functional Supabase/company session.
Strictly necessary cookies cannot be switched off, because the platform cannot function without them. Blocking or deleting them will affect your ability to use HauliK:
- Blocking authentication cookies will prevent you from signing in or remaining signed in.
- Blocking Stripe cookies during checkout may cause payment processing to fail.
You can manage cookies through your browser settings. The links below explain how to do this in common browsers:
8. Consent Evidence
To demonstrate and respect your choice, HauliK records an anonymous browser-scoped consent identifier, your grant/refusal/withdrawal event, the policy and banner versions presented, the choice timestamp and the server receipt timestamp. We do not put your name, email, HauliK account/company ID, raw IP address, full user-agent, visited URL or referrer in this consent record.
Consent evidence is currently scheduled for retention for up to 25 months, after which it is eligible for deletion under our retention process. Short-lived keyed request identifiers used only to protect the public evidence endpoint from abuse are deleted after seven days.
9. Changes to This Policy
We may update this Cookie Policy from time to time. Material changes will be notified to account administrators by email or via a platform notification. If a change affects optional analytics consent, analytics remains off until you make a fresh choice under the updated notice.
10. Contact Us
For any questions about this Cookie Policy or how we handle your data, please contact:
You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint