Cookie preferences
Choose what this sitemay store.
Everything except what is strictly necessary is off until you turn it on. Nothing here is pre ticked, nothing is bundled into a single box that also agrees to something else, and turning something off is exactly as easy as turning it on. This page has not been reviewed by a lawyer yet; that review is deferred.
Until you choose, this site sets no cookie for you, loads no measurement tool, and runs no advertising or social code. Two tools sit behind the measurement switch, PostHog and Google Analytics, and they load only after you allow them. Nothing sits behind the other two switches except the one Google setting named under Marketing. Verifiable in your browser's network and storage panels
Your choices
Four categories,three of them yours to set.
-
Strictly necessaryNo switch, because there is nothing to switch
What it coversAnything required for the site to work at all, such as security and load balancing at the host, the spam check on pages with a form, and the record of the choice you make on this page. Consent is not asked for this category because the site cannot be delivered without it.
In use todayYour own choice, stored as the one entry described in the next band, which holds three true or false values and a date and nothing that could be matched to you. On a page with a form, the spam checks run on hureal.ca itself; a separate bot-check service is not switched on yet. hureal.ca sets no cookie for visitors; the only cookie it sets at all is the sign in session for the person who runs the site's admin.
-
FunctionalRemembering something you chose
What it coversSmall preferences that make a return visit less repetitive: a notice you dismissed staying dismissed, or a view you chose staying chosen. It never identifies you and it never leaves your browser. Nothing on the site uses this category yet.
Your choice
-
MeasurementCounting, not watching
What it coversCounting how many people reached a page, where they arrived from, including any campaign tags in the address, which buttons lead to a request, and whether a form or email sign up was sent, so we can tell whether a page does its job. A tag value containing an @ or a space is dropped, and advertising click identifiers are never sent. Two tools do it: PostHog, whose events pass through hureal.ca/ingest, and Google Analytics 4. Each keeps a random identifier for this browser in its own cookies and storage. Neither ever receives your name, your email, your company or anything you type into a form. It does not cover session recording, heat mapping, or following you to another site, and those are not categories on this page because they are not things this site will do.
Your choice
-
MarketingAdvertising and profiling
What it coversAdvertising, remarketing, and building a profile of you across sites. HUREAL has committed that nothing offered as useful on this site carries a sales sequence attached to it, and this switch is the mechanical version of that commitment rather than a restatement of it. Today one thing sits behind it: if you allow it together with measurement, Google Analytics may use Google signals, which lets Google relate the visit to a signed in Google account, and may use the visit for Google's ad personalisation. There is no advertising pixel and no remarketing tag on this site.
Your choice
What is in your browser right now, printed rather than described. Nothing is stored in your browser for this site.
One thing about the three buttons that is worth knowing. Moving a switch changes it on the page and does not write anything. It is the buttons that write: Save my preferences records whatever the switches currently show, and Allow all and Allow only what is necessary set all three and record the result in the same action. The banner's Allow all and Decline do exactly the same as the two buttons here, and write to the same entry. The line above the buttons tells you which of those just happened, and the line below prints the stored value in full, so there is no state you have to take on trust.
What your choice creates
One entry, in your own browser.
Saving a preference writes a single entry to this browser's local storage under the key hureal.consent.v1. It is not a cookie, it is not sent to a server, it reaches no network, and it identifies nobody. Everything below describes what the site's own code does with it, and you can check each line in your browser's storage panel.
-
The key
hureal.consent.v1, in local storage, on the hureal.ca origin. It is the only entry HUREAL's own code writes, with one exception: if you close the small note that suggests the other HUREAL address (hureal.ca in Canada, hureal.ai elsewhere), or follow its link, hureal.domain-note.v1 records the date you did, and nothing else, so the note does not come back. If you allow measurement, PostHog and Google Analytics add their own, which the next band names.
-
The value, in full
Three true or false values, one per switch, and the date you saved them. If you allowed measurement only, it reads exactly:
{"functional":false,. There is no identifier in it, and no field that is not in that list."measurement":true, "marketing":false, "saved":"2026-09-23"} -
When it is written
Only when you press Save my preferences, Allow all, or Allow only what is necessary here, or Allow all or Decline in the banner. Moving a switch on its own writes nothing, and ignoring the banner writes nothing.
-
How long it lasts
Local storage has no expiry of its own, so the entry stays until something removes it. The date inside it records when you chose. Once that date is more than twelve months old, the site treats the entry as no choice at all: everything optional is off again and the banner asks again. The reason for twelve months is one of the two positions on this page, set out in full in the last band.
-
Where it does and does not follow you
It is one browser on one device, and one profile inside that browser. It does not travel to your phone, to another browser, or to a private window, and each of those is a fresh start with everything not allowed.
-
If your browser blocks storage
In a private window, or where a policy blocks storage outright, the page tests once, finds it cannot write, and says so on the page. Nothing is stored and no measurement tool loads, which is the same outcome as allowing nothing, and it is the strictest one rather than a failure.
If you change your mind
- Move any switch and press Save my preferences. The new value replaces the old one.
- Or press Allow only what is necessary, which turns all three off and records it in one action.
- Or press Clear the stored preference, which deletes the entry entirely and puts every switch back to not allowed.
- Or clear your browsing data for this site in your browser, which removes it the same way.
- Turning something off has to actually stop it, not just record that you said so. Turning measurement off stops PostHog from capturing and clears its identifier, deletes the Google Analytics cookies, and reloads the page so neither is running.
- You never have to come back here to say no. Everything is off until you say otherwise, on every visit, on every device.
Why local storage rather than a cookie. A cookie is attached to every request the browser makes to this domain, so it travels whether or not anybody needs it. A local storage entry stays in the browser until something reads it. For a value whose entire job is to be read by the site's own code in your browser, the entry that never leaves is the smaller thing, and the smaller thing is the right one. The page is still called cookie preferences, because that is what a person looks for.
What actually loads
Every request this site makes.
A cookie page that lists categories and never lists the actual things is the version most sites ship. This is the list. Open your browser's network panel and reload, and it should match.
- This document
The page you are reading, served from hureal.ca.
- The stylesheets and scripts
From hureal.ca, shared by every page and cached after the first one. They draw the page and run the menu, the diagrams, the forms and the switches above. None of them sends anything about you anywhere unless you send a form or allow measurement.
- Two typefaces
Inter Tight and IBM Plex Mono, served from hureal.ca. Loading them no longer sends a request to any other domain.
- PostHog and Google Analytics, only if you allow measurement
PostHog sends its events through hureal.ca/ingest, which passes them on to PostHog. Google Analytics loads from Google's own servers. Before you allow measurement neither makes a single request.
- One country check, until you close the address note
A request to /api/geo/ on this site, which answers with the two letter country your connection comes from and nothing else, so a visitor in Canada can be pointed to hureal.ca and anyone else to hureal.ai. The answer is not stored and no cookie is set. Once you close the note, the request is never made again.
- Images, where a page has them
Served from hureal.ca. This page has none.
That is the whole list. There is no advertising pixel, no remarketing tag, no heat map, no session recorder and no social embed anywhere on this site.
The commitment attached to that list
- Anything added later is added behind the matching switch above, never in front of it.
- It is listed on this page by name, with what it does and who runs it.
- A new purpose asks for consent again rather than inheriting the old answer.
- The switches keep working, including the one that turns something off after you allowed it.
Not decided yet: host and its logs to choose The measurement tools are chosen: PostHog and Google Analytics, both behind the measurement switch. The font request that used to be on this list is gone, because both typefaces are now served from this domain.
Two positions
A banner, and how long a yes lasts.
Two things this page decides rather than leaves open: when a first visit gets a banner, and how long a recorded choice counts. Each is stated with the reason for it.
-
Does a first visit need a banner as well as this page?Position
What HUREAL doesYes, now that something sits behind a switch. HUREAL said it would add a banner the day anything landed behind one, and analytics has. A first time visitor sees a short banner with three buttons of equal weight: Allow all, Decline, and Choose, which opens this page. Nothing optional loads until one of them is pressed, and ignoring the banner leaves everything off.
WhyFederal privacy legislation works on knowledge and consent: a person is told what is collected and why, and agrees to it. Measurement collects something beyond the request that serves the page, so a visitor is told first and asked. Quebec's legislation adds a rule for technology that can identify, locate or profile a person: they are told before it is used and told how to switch those functions on. Rather than work out which visitor is in Quebec, HUREAL applies that rule to everybody, so anything of that kind is off until the visitor turns it on.
-
How long is a recorded choice treated as current?Position
What HUREAL doesTwelve months from the date inside the entry, then the question is asked again rather than the old answer being carried forward indefinitely. Twelve months is the number because it is the common practice in the guidance most European regulators publish and it is the interval a person can actually remember agreeing to. The site enforces it: an entry older than twelve months is read as no choice, so everything optional is off until you answer again, as the band above describes.
WhyNo Canadian statute sets how long a consent stays current, so this is a policy rather than a rule being followed. The question is asked again after 12 months, or straight away when a category on this page changes, whichever comes first. The second trigger matters more than the first: a yes given to one thing is never carried over to something new.
Neither of these blocks the page. The control works, everything optional is off, and nothing optional loads until somebody chooses.
Privacy covers what is collected and what happens to it. Terms covers using this site. How this site is built carries the same facts about requests and storage, with the method for checking them.