Cookie Policy
Last Updated: August 10, 2026
The English version of this document is the legally binding version.
This Cookie Policy explains which cookies and similar technologies OKLAKO S.R.L. (IDNO 1015600036593, Chișinău, Republic of Moldova), operating the HYTHOST services, uses on hythost.com, what they do, and how you can control them. It complements the Privacy Policy.
1. Two Groups of Technologies
Strictly necessary technologies make the website, client area, and checkout work: login sessions, security tokens, bot protection, and your cookie choice itself. They are always active and do not require consent.
Measurement technologies help us understand website usage and advertising performance: Google Analytics 4, Google Ads conversion measurement, and Microsoft Clarity where enabled. They are activated only if you accept them in the cookie banner. Until you choose, and if you decline, Google tags run in consent-denied mode: they set no cookies and store no persistent identifiers, and nothing is written to your device. If you arrive from an advert, the ad click identifier is carried in the server-side session for that visit, so we can still tell that an order came from an advert without storing anything in your browser. Google may receive short-lived cookieless pings used only for aggregate statistical modeling.
2. Cookies We Use
Strictly necessary
| Name | Purpose | Duration |
|---|---|---|
| WHMCS session cookie (WHMCS*) | Keeps you logged in to the client area, protects checkout and forms | Session |
| hh_consent | Stores your cookie banner choice (accepted or declined) | 180 days |
| __cf* / cf_* | Cloudflare content delivery, security, and Turnstile bot protection | Up to 1 year |
| cw_conversation | Live chat session (Chatwoot, runs on our own infrastructure) | Persistent until cleared |
| hh_sid | Random session identifier for our own first-party record of page interactions (see the note below the tables). Never shared with advertising platforms | 365 days |
| hh_fastco | Short-lived flag that keeps the express checkout flow on track between the configurator and the cart | 5 minutes |
| hh_confdom_return | One-shot flag set when you remove a domain from the cart, so we can return you to the right step | Session (cleared on the next page load) |
| promoDismissed | Remembers that you closed the promotional banner at the top of the page | 24 hours |
Measurement (only with your consent)
| Name | Purpose | Duration |
|---|---|---|
| _ga, _ga_* | Google Analytics 4 — distinguishes visitors, website usage statistics | Up to 2 years |
| _gcl_au, _gcl_aw | Google Ads — links a purchase to the ad click that led to it | Up to 90 days |
| hh_gclid | First-party copy of the ad click identifier, used to attribute orders to advertising | 90 days |
| _clck, _clsk | Microsoft Clarity — session analytics. Active on the cart and checkout pages only, never on the public marketing pages | Up to 1 year |
About hh_sid and our own interaction record. This cookie is not analytics in the advertising sense — it never leaves our infrastructure and is never shared with Google, Microsoft or anyone else. It labels a visit so that our own record of page interactions (button clicks, steps reached) can be read as a sequence; that record also stores your IP address, browser user agent and referring page, which we use to separate real visitors from bots and to debug the order process. It is kept for 90 days and is described in Section 6 of the Privacy Policy.
Exact cookie names set by third parties can vary as those providers update their platforms; the groups and purposes above stay accurate. Payment pages of Skrill, Paynet, and PayPal set their own cookies under their own policies once you are redirected to them.
3. How to Change Your Choice
Use the Cookie preferences link in the website footer at any time to reopen the banner and change your decision. Declining after accepting stops measurement immediately: Google’s and Microsoft’s tags stop reading and writing their cookies, and we delete our own advertising cookie straight away. Cookies those providers already placed on your device stay there until they expire or you clear them in your browser — we cannot delete another party’s cookie for you. Your choice is stored for 180 days, after which the banner asks again. You can also delete or block cookies in your browser settings, but blocking strictly necessary cookies may break login, checkout, or support features.
4. More Information
How we process personal data collected through these technologies, your rights, and how to complain are described in the Privacy Policy. Questions: open a support ticket or email [email protected].
