Cookie Policy
Last updated: 23 July 2026
This Cookie Policy explains how HRN Innovation Technologies LTD ("HORNO", "we", "us") — operator of the HORNO Mobile eSIM service at mobile.horno.net — uses cookies and similar technologies on this website. It should be read together with our Privacy Policy and Legal Notice published on horno.net.
1. What are cookies and similar technologies
Cookies are small text files placed on your device by the websites you visit. They are widely used to make websites work efficiently, remember your preferences and provide reporting to site owners.
We also use technologies that are functionally equivalent to cookies:
- localStorage / sessionStorage — key/value data stored by your browser for this origin.
- IndexedDB — structured storage used by the Supabase auth client for the session token.
- Pixel tags & SDK events — used by Google Analytics 4 to record page views and e‑commerce events.
For simplicity, we refer to all of these as "cookies" throughout this policy. The rules below apply to any of them that store or read information on your device.
2. Categories of cookies we use
2.1 Strictly necessary — no consent required
These are essential to deliver the eSIM service you request. Without them, sign‑in, checkout and wallet operations would not work. Legal basis: contract performanceand legitimate interest (art. 6(1)(b) and (f) GDPR; art. 5(3) ePrivacy exception for strictly necessary storage).
| Name | Set by | Purpose | Retention |
|---|---|---|---|
sb-*-auth-token | mobile.horno.net (Supabase) | Keeps you signed in and refreshes your session securely. | Until sign‑out or ~1 hour after inactivity (refresh token: 30 days). |
horno_mobile_cookie_consent | mobile.horno.net | Stores your cookie‑banner choice so it isn't shown again. | 12 months (localStorage). |
i18nextLng | mobile.horno.net | Remembers your language preference. | 12 months (localStorage). |
__cf_bm, cf_clearance | Cloudflare (hosting/CDN) | Bot mitigation and infrastructure security. | Up to 30 minutes / 30 days. |
__stripe_mid, __stripe_sid | Stripe (only on top‑up pages) | Fraud prevention during card payments; only set on the Stripe‑hosted checkout. | 1 year / 30 minutes. |
2.2 Analytics — consent required
Loaded only after you click "Accept all" in the cookie banner. We use Google Analytics 4 (property G-R3Y03GLXL7) with IP anonymisation enabled and Google Signals disabled. Legal basis: consent (art. 6(1)(a) GDPR; art. 5(3) ePrivacy).
| Name | Set by | Purpose | Retention |
|---|---|---|---|
_ga | Google (googletagmanager.com) | Distinguishes unique visitors. | 2 years. |
_ga_R3Y03GLXL7 | GA4 session state for this property. | 2 years. | |
_gid | Distinguishes users within a 24‑hour window. | 24 hours. |
2.3 Advertising
HORNO Mobile does not run advertising, remarketing, personalisation or conversion‑tracking cookies. If this changes in the future, this policy will be updated and your consent re‑requested.
3. Google Consent Mode v2
On every page load, before any Google tag runs, the following signals are set to denied by default:
ad_storagead_user_dataad_personalizationanalytics_storage
When you press Accept all, we call gtag('consent', 'update', ...) and grant all four signals. Pressing Reject keeps them denied — Google Analytics then runs in cookieless ping mode, which sends no identifiers and stores nothing on your device.
4. Third parties and international transfers
The following processors may set cookies or receive data from cookies:
- Google Ireland Ltd (Google Analytics 4) — traffic measurement. Data may be transferred to the United States under the EU‑US Data Privacy Framework.
- Stripe Payments Europe Ltd — fraud prevention during card payments on the Stripe‑hosted checkout page.
- Cloudflare Inc. — CDN, DDoS protection and bot mitigation for the site.
- Supabase Inc. — authentication and session storage.
Transfers outside the EEA rely on Standard Contractual Clauses or an equivalent adequacy mechanism.
5. Manage your consent
You can withdraw or change your consent at any time — it is as easy to withdraw as it is to give. Use the button below to clear your saved choice; the cookie banner will reopen on the next page load.
You can also control cookies directly in your browser settings, including deleting existing cookies and blocking future ones. Note that disabling strictly‑necessary cookies will break sign‑in, checkout and the wallet.
To opt out of Google Analytics across all sites, you may install the Google Analytics Opt‑out Browser Add‑on.
6. Changes to this policy
We may update this Cookie Policy to reflect changes in the technologies we use or in applicable law. Material changes will be communicated through the cookie banner and will require a fresh consent action.
7. Contact
Data controller: HRN Innovation Technologies LTD, Level 2, Innovation One, DIFC — Dubai, United Arab Emirates.
Privacy questions: privacy@horno.net.
Group Privacy Policy: horno.net/privacy-policy.
