Cookie Notice
Last updated November 2, 2026
This notice explains the cookies and similar technologies used on usehereby.com and on data room and signing pages hosted by Hereby.
The short version
Hereby uses only strictly necessary cookies: to keep you signed in and to protect your requests. We do not use advertising cookies, third-party analytics or tracking pixels, so we do not ask for cookie consent.
Cookies we set
| Name | Purpose | Duration |
|---|---|---|
hb_session | Keeps a workspace member signed in | Up to 30 days, renewed while you use the app |
hb_portal | Keeps a viewer or signer verified for a data room or signing envelope | Up to 7 days, or as set by the workspace |
hb_csrf | Protects your actions against cross-site request forgery | Same as the session |
These cookies are first-party, Secure and (for the session cookies) HttpOnly. They hold a random token, not your personal details.
Cookies set by our network provider
Cloudflare, which protects and delivers our site, may set security cookies such as __cf_bm or cf_clearance to tell people from bots. They are strictly necessary and do not track you across sites. See Cloudflare's cookie policy.
Local storage
The app stores a few view preferences in your browser's local storage, such as list or grid view and a collapsed sidebar. They never leave your device.
Payments
When you buy a plan, the checkout page is run by our Merchant of Record, Polar, which may set its own cookies under its own policy.
Managing cookies
You can block or delete cookies in your browser settings. If you block the cookies above, you will not be able to sign in, view a data room or sign a document.
Questions: [email protected]. See also our Privacy Policy.