Last updated: 5 June 2026
This page explains every cookie HARRIS sets in your browser when you visit harrishq.ai or sign in to the dashboard. It complements section 12 of our Privacy Policy.
HARRIS sets only the cookies listed below. We do not set any analytics, advertising, retargeting, social-network, fingerprinting, or other third-party tracking cookies on harrishq.ai. The site loads no third-party analytics scripts (Google Analytics, Meta Pixel, LinkedIn Insight, TikTok Pixel, etc.) on its public pages or the dashboard. There is no consent banner gate because, today, there is nothing on this site to consent to beyond what is strictly necessary to sign you in.
Required for the site to work — sign-in, session persistence, and remembering that you have dismissed the cookie notice. Exempt from prior consent under PECR / UK GDPR.
auth_token — Short-lived JWT access token used to authenticate signed-in requests. HttpOnly, Secure, SameSite=Strict. (retention: ~2 hours; First-party (harrishq.ai))refresh_token — Long-lived refresh token used to mint a new auth_token. HttpOnly, Secure, SameSite=Strict, path-scoped to /api/auth. (retention: 30 days; First-party (harrishq.ai))cookie_notice_ack — Records that you have dismissed the on-page cookie notice so it does not reappear on every load. Contains a single literal value (`1`); no identifiers, no PII. (retention: 12 months; First-party (harrishq.ai))Not currently used. HARRIS sets no analytics, performance, or usage-measurement cookies on harrishq.ai today.
Not currently used. HARRIS sets no advertising, retargeting, or marketing cookies on harrishq.ai today.
Under the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, strictly-necessary cookies — those required to deliver a service the user has explicitly requested, such as keeping you signed in — are exempt from the prior-consent requirement. All three cookies above fall into that category, which is why the on-page notice is informational rather than a consent gate.
HARRIS lets you connect your own analytics, marketing, and platform accounts (PostHog, Meta, Google, TikTok, Shopify, etc.) so its agents can act on your behalf. Those integrations run server-side against the provider's API using credentials you supply — they do not place any third-party tracker on harrishq.ai. Any cookies the providers set live on your own sites (or in your own dashboards on the provider's domain) and are governed by your own cookie policy and the provider's terms, not by this page.
If HARRIS ever introduces a non-essential cookie or script (for example, first-party usage analytics on the dashboard, or a marketing pixel on the public site), the informational notice will be replaced with a true opt-in consent gate: granular per-category toggles (analytics / marketing), reject-by-default, and the non-essential scripts will not load before you have actively granted the relevant category. Consent decisions will be recorded in our audit log alongside the existing privacy-policy and terms-of-service consents. We commit to never silently flipping a category on.
You can clear or block cookies via your browser settings at any time. Blocking the strictly-necessary cookies will sign you out and prevent the dashboard from working — there is no way to use a signed-in feature without a session cookie. Dismissing the on-page notice is optional; if you do not, the cookie_notice_ack cookie is never written.
If we change the cookies we set, we will update this page and (where the change is material — for example, introducing a non-essential cookie) update the dashboard banner and request your consent before activating it.
Questions about cookies on harrishq.ai: support@harrishq.ai or our Data Protection Officer at dpo@harrishq.ai.