Cookie and Storage Notice
Last updated: 17 September 2026
This notice lists every cookie and browser storage item HuntBook SA sets, what each one is for, and how long it lasts. It supplements section 14 of our Privacy Policy.
Everything listed here is strictly necessary — it keeps you signed in, protects your account, or stops automated abuse. We set no advertising cookies, no analytics cookies and no third-party tracking cookies, on either of our websites. Because none of it is used for advertising, analytics or profiling, we do not ask for consent to it: it is what makes the service you asked for work. Blocking it will stop you signing in.
1. Where this applies
| Site | What it sets |
| `huntbooksa.co.za` — our public information site | Nothing at all. No cookies, no storage, no third-party requests |
| `app.huntbooksa.co.za` — the HuntBook SA app | The items listed below, once you sign in |
2. Cookies we set
All four are first-party cookies on `app.huntbooksa.co.za` only. They carry the `__Host-` prefix, which locks them to that exact address, and `SameSite=Strict`, which stops any other website causing your browser to send them.
| Cookie | What it does | How long it lasts |
| `__Host-wildbook_access` | Keeps you signed in. `HttpOnly`, so no script on the page can read it | Short-lived; refreshed while you are active |
| `__Host-wildbook_refresh` | Renews your sign-in without asking for your password again. `HttpOnly` | Until it expires or you sign out |
| `__Host-wildbook_csrf` | Proves a request came from our own app and not from another website. Readable by our app, which must send it back on every change | Matches the renewal cookie |
| `__Host-wildbook_impersonation` | Set only when an administrator has opened your account to investigate a fault you reported. Section 7.4 of the Privacy Policy explains when this is allowed and what it is limited to | 30 minutes maximum, and it cannot be renewed |
Signing out deletes all four.
3. Browser storage we use
| Item | Type | What it does | How long it lasts |
| Session coordination record | Local storage | Keeps your sign-in state in step when you have HuntBook SA open in more than one browser tab, so signing out of one signs out of all | Until you sign out or clear your browser |
| Cookie notice seen (`huntbook_cookie_notice_seen`) | Local storage | Remembers that you pressed OK on the notice shown over the sign-in page, so it is not shown again. Holds nothing about you | Until you clear your browser |
| Support session marker | Session storage | Records that an administrator support session was started in this tab, so that if it ends while you are away we can tell you it ended rather than leaving it unclear | Cleared when you close the tab |
We do not store your password, your sign-in tokens or your personal information in browser storage.
4. Third parties that may set their own cookies
These run inside the app to provide a specific function you have asked for. Each one is governed by its own privacy policy, and each is listed as an operator in section 7.2 of our Privacy Policy.
| Provider | When it runs | What it is for |
| Cloudflare (Turnstile) | On the app's sign-in and registration pages | Confirms you are a person and not an automated script. Anti-fraud, not advertising |
| Google (Sign in with Google) | Only if you choose to sign in with Google | Signs you in with your Google account |
| Apple (Sign in with Apple) | Only if you choose to sign in with Apple | Signs you in with your Apple ID |
| PayFast | Only when you start a subscription payment | Processes the payment on PayFast's own pages |
| MapTiler | When a map is shown | Supplies the map tiles and satellite imagery |
| Sentry | Throughout the app | Reports technical faults so we can fix them. It sets no cookies |
We do not control what these providers set on their own pages, and we receive no advertising or profiling data from any of them.
5. Managing cookies
Every browser lets you view, block and delete cookies, usually under Settings → Privacy. You can also use a private browsing window, which discards everything when you close it.
Because the items in sections 2 and 3 are what keep you signed in and protect your account, blocking or deleting them means you will be signed out and, in some browsers, unable to sign in at all. There is nothing on either site to switch off for advertising or analytics, because there is nothing of that kind running.
6. Changes to this notice
If we ever add anything that is not strictly necessary — analytics, for example — we will update this notice before it runs, and we will ask for your consent first rather than setting it and telling you afterwards.
We review this notice whenever we add or remove a provider. The current version is always the one published here.
7. Questions
Contact our Information Officer, whose details are in section 1 of our Privacy Policy at https://app.huntbooksa.co.za/legal/privacy-policy.html.