Back

Cookies Policy

Effective September 27, 2026

1. What this page covers

Cookies are small text files a website stores in your browser. Modern web apps also use related browser-storage mechanisms (localStorage, sessionStorage, IndexedDB) for similar purposes. This page lists every cookie and storage key Honedly uses, what each one is for, and how to control them. For our broader data practices, see our Privacy Policy.

2. Strictly necessary cookies

These are required for the app to function. Disabling them breaks sign-in.

  • Session cookie — a signed session token set by our authentication system that keeps you logged in across page loads. First-party and HttpOnly. It is shared across honedly.com and its subdomains (the app, admin and partner sites) so one sign-in covers them. Cleared when you sign out.

3. Functional / preference storage

These store small UI preferences and caches so the app remembers your choices and works offline. They are not strictly necessary and can be cleared at any time without losing your account data, but clearing them resets the corresponding preference. None of them contain personal data beyond what you've already chosen in the app.

  • Theme — your light/dark mode preference, kept in your browser's local storage.
  • Install-banner dismissal — a localStorage flag so the “Install Honedly” mobile banner doesn't reappear after you close it.
  • Sidebar state — a sessionStorage entry recording which navigation groups you've expanded.
  • Grocery list cache — localStorage cache of the current week's grocery list so it loads instantly.
  • Meal-prep plan cache — localStorage cache of the current week's prep plan and checkbox state.

4. Analytics (consent required)

We use Google Analytics 4 to understand which features people use, so we can prioritize the right work. GA only loads after you click Accept on the cookie banner, and only on our public pages: the home page, help, these legal pages, and shared recipes and collections. It never runs inside your account, on public profiles, or on sign-in pages. If you decline, no GA cookies are set and no events are sent. Google Signals and ad personalization are turned off.

When enabled, GA sets _ga and _ga_* cookies (typically expire after 2 years) and records anonymized page views, device/browser metadata, and an anonymized IP address. We do not send Honedly account identifiers or meal/workout content to GA.

You can change your choice at any time with the Cookie settings link in the site footer, from Settings → Account, or with the button below. Declining stops GA straight away and deletes its cookies, and also turns off Honedly's own product analytics (section 5). If your browser sends a Global Privacy Control or Do Not Track signal, GA never loads, whatever you chose.

We do not use Facebook Pixel, advertising tags, fingerprinting scripts, or any third-party marketing cookies. We do not sell or share your data with advertisers.

5. First-party product analytics

Separately from Google Analytics, Honedly measures how the app is used with its own first-party analytics and error reporting. Events and error reports go only to Honedly's own servers, never to a third-party analytics or crash-reporting company. What they contain and how long we keep them is in the Privacy Policy. In the browser they use:

  • Session id (honedly:t:sid, honedly:t:sid-seen) — sessionStorage, scoped to one tab. A random id that groups one visit's events; it is replaced after 30 minutes of inactivity and disappears when you close the tab.
  • Analytics id (honedly:t:aid) — localStorage. A random id, kept only after you click Accept and only while your browser sends no Global Privacy Control or Do Not Track signal. It lets us connect a visit before sign-up with the account created afterwards. Declining in Cookie settings deletes it straight away.
  • Opt-out sent (honedly:t:consent-synced) — sessionStorage, scoped to one tab. Notes that this tab has already told our servers your account declined analytics, so it isn't sent again; no id.

If you're signed out and haven't accepted, product events are not recorded. If you're signed in, events are linked to your account by our servers unless your account has opted out of analytics. After you decline, or with a Global Privacy Control or Do Not Track signal, the site sends no product events at all, signed in or not, and your account is opted out the next time you open it in this browser (straight away when you decline while signed in). An opted-out account gets no product analytics from any device; see the Privacy Policy. Error reports are sent in every case, without an analytics id, because we need them to keep the service working; they are scrubbed of emails, tokens and similar identifiers before storage.

6. Service worker and offline cache

Honedly is a Progressive Web App. When you install it (or just open it in a modern browser), the service worker stores cached copies of pages and API responses in your browser so the app keeps working offline. This cache lives in your browser's storage, not on our servers, and is automatically refreshed when you're back online. You can clear it from your browser's site-data settings at any time.

7. How to clear or block cookies and storage

You can clear cookies, localStorage, and the service worker cache from your browser's settings under “Site data” or “Storage” for this domain. Note that clearing the session cookie will sign you out, and blocking cookies entirely will prevent you from signing in.

8. Changes to this policy

We may update this page as the app evolves. Material changes will be communicated in-app or by email before they take effect.

9. Contact

Honedly, LLC. Questions about cookies or this policy? Contact hello@honedly.com.