Cookie Policy

Last updated: 23 July 2026

This Cookie Policy explains how HRN Innovation Technologies LTD ("HORNO", "we", "us") — operator of the HORNO Mobile eSIM service at mobile.horno.net — uses cookies and similar technologies on this website. It should be read together with our Privacy Policy and Legal Notice published on horno.net.

1. What are cookies and similar technologies

Cookies are small text files placed on your device by the websites you visit. They are widely used to make websites work efficiently, remember your preferences and provide reporting to site owners.

We also use technologies that are functionally equivalent to cookies:

  • localStorage / sessionStorage — key/value data stored by your browser for this origin.
  • IndexedDB — structured storage used by the Supabase auth client for the session token.
  • Pixel tags & SDK events — used by Google Analytics 4 to record page views and e‑commerce events.

For simplicity, we refer to all of these as "cookies" throughout this policy. The rules below apply to any of them that store or read information on your device.

2. Categories of cookies we use

2.1 Strictly necessary — no consent required

These are essential to deliver the eSIM service you request. Without them, sign‑in, checkout and wallet operations would not work. Legal basis: contract performanceand legitimate interest (art. 6(1)(b) and (f) GDPR; art. 5(3) ePrivacy exception for strictly necessary storage).

NameSet byPurposeRetention
sb-*-auth-tokenmobile.horno.net (Supabase)Keeps you signed in and refreshes your session securely.Until sign‑out or ~1 hour after inactivity (refresh token: 30 days).
horno_mobile_cookie_consentmobile.horno.netStores your cookie‑banner choice so it isn't shown again.12 months (localStorage).
i18nextLngmobile.horno.netRemembers your language preference.12 months (localStorage).
__cf_bm, cf_clearanceCloudflare (hosting/CDN)Bot mitigation and infrastructure security.Up to 30 minutes / 30 days.
__stripe_mid, __stripe_sidStripe (only on top‑up pages)Fraud prevention during card payments; only set on the Stripe‑hosted checkout.1 year / 30 minutes.

2.2 Analytics — consent required

Loaded only after you click "Accept all" in the cookie banner. We use Google Analytics 4 (property G-R3Y03GLXL7) with IP anonymisation enabled and Google Signals disabled. Legal basis: consent (art. 6(1)(a) GDPR; art. 5(3) ePrivacy).

NameSet byPurposeRetention
_gaGoogle (googletagmanager.com)Distinguishes unique visitors.2 years.
_ga_R3Y03GLXL7GoogleGA4 session state for this property.2 years.
_gidGoogleDistinguishes users within a 24‑hour window.24 hours.

2.3 Advertising

HORNO Mobile does not run advertising, remarketing, personalisation or conversion‑tracking cookies. If this changes in the future, this policy will be updated and your consent re‑requested.

3. Google Consent Mode v2

On every page load, before any Google tag runs, the following signals are set to denied by default:

  • ad_storage
  • ad_user_data
  • ad_personalization
  • analytics_storage

When you press Accept all, we call gtag('consent', 'update', ...) and grant all four signals. Pressing Reject keeps them denied — Google Analytics then runs in cookieless ping mode, which sends no identifiers and stores nothing on your device.

4. Third parties and international transfers

The following processors may set cookies or receive data from cookies:

  • Google Ireland Ltd (Google Analytics 4) — traffic measurement. Data may be transferred to the United States under the EU‑US Data Privacy Framework.
  • Stripe Payments Europe Ltd — fraud prevention during card payments on the Stripe‑hosted checkout page.
  • Cloudflare Inc. — CDN, DDoS protection and bot mitigation for the site.
  • Supabase Inc. — authentication and session storage.

Transfers outside the EEA rely on Standard Contractual Clauses or an equivalent adequacy mechanism.

5. Manage your consent

You can withdraw or change your consent at any time — it is as easy to withdraw as it is to give. Use the button below to clear your saved choice; the cookie banner will reopen on the next page load.

You can also control cookies directly in your browser settings, including deleting existing cookies and blocking future ones. Note that disabling strictly‑necessary cookies will break sign‑in, checkout and the wallet.

To opt out of Google Analytics across all sites, you may install the Google Analytics Opt‑out Browser Add‑on.

6. Changes to this policy

We may update this Cookie Policy to reflect changes in the technologies we use or in applicable law. Material changes will be communicated through the cookie banner and will require a fresh consent action.

7. Contact

Data controller: HRN Innovation Technologies LTD, Level 2, Innovation One, DIFC — Dubai, United Arab Emirates.
Privacy questions: privacy@horno.net.
Group Privacy Policy: horno.net/privacy-policy.