Effective Date: Aug 9, 2026

Cookie Policy

Cookies help us enhance your browsing experience, analyze website traffic, and personalize content. By using our website, you consent to the use of cookies in accordance with this policy. This document outlines what cookies are, how we use them, and how you can manage your cookie preferences.

‍

This policy explains what HERO stores on your device, and what it reads back. It covers our marketing website at myhero.so and the HERO application at app.myhero.so, and forms part of our Privacy Policy.

We have called it a Cookie Policy because that is what people look for, but it deliberately covers more than cookies. The law that applies here - the Privacy and Electronic Communications Regulations - governs any storage of information on your device or access to information already stored there. That includes local storage, session storage and IndexedDB, all of which HERO uses more than it uses cookies. Describing only the cookies would leave out most of what actually happens.

1. The short version

(a) We use no analytics cookies, no advertising cookies, and no tracking technologies of any kind - not on the website, and not in the application. We do not profile you, and we do not share anything with advertising networks.

(b) The HERO application sets no cookies at all. It stores things in your browser's local storage so the editor works properly, and that data stays on your device.

2. What we store on our marketing website

2.1 myhero.so

Name	Type	Set by	Purpose	Lasts
`_cfuvid`	Cookie	Cloudflare, which sits in front of our website	Distinguishes one visitor's requests from another's so rate limiting and bot protection work. Strictly necessary — it is a security control, not analytics, and is not used to identify you.	Until you close your browser
`consentMode`	Local storage	HERO	Remembers the choice you made in the consent banner, so we do not ask again on every page. Strictly necessary — without it we could not honour your preference.	Until you clear your browser storage
Webflow functional cookies	Cookie	Webflow, our website host	May be set when you submit a form, to prevent duplicate submissions and to remember that a form has been completed.	Session or short-lived

(a) That is the complete list. There is nothing else.

2.2 Third parties that see your IP address

(a) Some parts of our website are served from other companies' servers. Those companies do not set cookies through us and receive no tracking data, but because your browser fetches files from them directly, they can see your IP address and browser type. They are:

— Webflow, which hosts the website and serves its images and stylesheets.

— Cloudflare, which sits in front of the website for performance and security.

— Amazon CloudFront, which serves the jQuery library Webflow sites depend on.

— Google Fonts, which serves the Inter typeface used across the site.

3. What the HERO application stores

3.1 app.myhero.so

(a) The application sets no cookies. It uses your browser's local storage, session storage and IndexedDB — all of which stay on your device and are never transmitted to us as such.

What	Where	Why
Your signed-in session	IndexedDB and local storage, managed by Google Firebase Authentication	Keeps you signed in between visits so you are not asked for your password on every page. Strictly necessary.
A local copy of documents you have opened	IndexedDB, one store per document	Lets the editor open instantly and keep working through a brief loss of connection, then sync your changes when you reconnect. Strictly necessary to the editor.
Interface preferences — for example which table columns you have hidden	Local storage	Keeps the interface the way you left it.
Which workspace invitation you have already accepted	Session storage	Stops an invitation being processed twice. Cleared when you close the tab.

(b) Signing out of the application, or clearing your browser storage, removes all of it. On the desktop application the equivalent data is stored on your computer and is removed when you sign out.

(c) If you use a location field in a table, the map is drawn by Google Maps, which loads in your browser and can therefore see your IP address. If you use payment features, Stripe's checkout may set its own cookies under its own policy.

4. Your choices

4.1 The consent banner

(a) When you first visit myhero.so you are offered a banner with categories covering functionality, analytics, advertising, personalisation and security. You can accept everything, or choose category by category, and change your mind at any time from the cookie settings link in the footer.

(b) Because we currently run no analytics or advertising technologies, choosing to decline those categories changes nothing in practice — there is nothing in them to switch off. The banner exists so that your preference is already recorded if that ever changes.

4.2 Controlling storage in your browser

(a) Every major browser lets you block or delete cookies and site data, usually under Settings, then Privacy. Blocking storage for app.myhero.so will stop the application working — it cannot keep you signed in or open your documents without it.

(b) Blocking storage for myhero.so has no meaningful effect beyond making the consent banner reappear on each visit.

4.3 Do Not Track and Global Privacy Control

We do not track you across sites, so these signals have nothing to act on. We honour them by default in the sense that the behaviour they are designed to prevent does not occur here.

5. Changes to this policy

If we introduce anything that stores information on your device beyond what is described above — in particular any analytics or advertising technology — we will update this policy and ask for your consent before it starts.

6. Contact

Questions about this policy, or about anything we store on your device, go to privacy@myhero.so, or write to Scribe Technologies Limited, First Floor, 690 Great West Road, Osterley Village, Isleworth, England, TW7 4PU.