This policy explains how Henry AI Technologies LLC ("Henry", "we") uses cookies and similar browser storage on usehenry.ai, app.usehenry.ai, and in the Henry apps. It supplements our Privacy Policy.
The short version
The signed-in Henry app uses only strictly necessary cookies: the ones that sign you in, keep you signed in, and remember basic settings. It does not load analytics or advertising tags. Our public website, usehenry.ai, additionally uses analytics cookies (to understand how people find and use the site) and advertising attribution cookies (to measure which ads and links bring people to Henry). Where the law requires consent, those are set only after you agree in the cookie banner; everywhere else you can turn them off at any time using Your Privacy Choices. Customer Content, your conversations with Henry, and your phone number are never used for advertising.
What cookies are
A cookie is a small text file a website stores in your browser so it can recognize you on later requests. "Similar storage" means related mechanisms such as local storage, which lets an app keep a setting on your device without sending it to us on every request, and pixels or scripts that report a page view to a provider. Cookies set by the site you are visiting are first-party cookies; cookies set by another company's domain are third-party cookies.
Cookies on the website (usehenry.ai)
The public marketing pages use the tools below. Google Tag Manager loads the analytics and advertising tags; it sets no cookies of its own. The banner's details view lists the exact cookie names in use, since providers change them from time to time.
| Provider and cookies | Purpose | Duration | Type |
|---|---|---|---|
henry_cookie_consent (Henry) | Records the cookie choices you made in the banner so we do not ask again and can honor them on every page. | 12 months. | Strictly necessary |
| Vercel Web Analytics | Counts page views and visits and reports aggregate device, browser, and country data. It uses no cookies and no cross-site identifiers; a visitor is recognized only within a single visit by a hash that is discarded afterwards. | No cookie is set. | Analytics |
Google Analytics (_ga, _ga_*), loaded through Google Tag Manager | Measures how visitors reach and move through the site: pages viewed, referring site or campaign, approximate location derived from IP address, device and browser. We do not enable Google Signals or advertising personalization in our Google Analytics configuration. | Up to 2 years. | Analytics |
| Cometly (first-party cookies set on usehenry.ai) | Attributes a visit and a later sign-up to the ad, link, or campaign that brought you here, and reports those conversion events to the advertising platforms we run campaigns on (Google Ads and Meta) so we can measure them. When you join the waitlist or sign up, the email address you entered is hashed (turned into a one-way code) and sent with the event so the platform can match it to an ad you saw; the platforms do not receive your readable email address from us. This is the only tool on our site that shares data with advertising platforms. | Up to 13 months. | Advertising and attribution |
Third-party services we embed in the sign-in flow, such as Google sign-in or a customer's SAML identity provider, may set their own cookies on their own domains during that flow. Those are governed by their policies, not this one.
Cookies in the app (app.usehenry.ai and the Henry apps)
The cookies below are set by app.usehenry.ai when you sign in or use the app. The signed-in app does not load Google Tag Manager, Google Analytics, or Cometly. It may use Vercel Web Analytics, which is cookieless as described above.
| Name | Purpose | Duration | Type |
|---|---|---|---|
sb-*(names begin with "sb-") | Authentication session cookies from our sign-in provider, Supabase Auth. They keep you signed in and refresh your session securely. | Session, refreshed while you use Henry, up to the lifetime of your sign-in. Cleared when you sign out. | Strictly necessary |
henry_workspace | Remembers which Workspace you have active so the app opens to the right one. | Persistent, until changed or you sign out. | Strictly necessary |
henry_mfa | Records whether your current session has completed two-factor authentication so we can ask for a code when required and not otherwise. | Session. | Strictly necessary |
henry-sso-claim | Holds the temporary state for a single sign-on (SAML) handshake while you are redirected to and from your identity provider. | Minutes; removed when the sign-in completes or expires. | Strictly necessary |
| Local storage (preferences) | The web, desktop, and mobile apps store preferences such as your theme (light or dark) on your device. | Until you change the setting or clear site data. | Strictly necessary |
Your privacy choices
Consent. If you visit from the European Economic Area, the United Kingdom, or Switzerland, analytics and advertising cookies are set only after you accept them in the cookie banner; the site works fully if you decline. Elsewhere, they are set when you arrive and you can turn them off at any time.
Changing your mind.The "Your Privacy Choices" link in the website footer reopens the banner so you can withdraw or grant consent for each category. Your choice is stored in the henry_cookie_consent cookie; clearing cookies resets it and the banner appears again.
Do Not Sell or Share.Under the California Consumer Privacy Act and similar U.S. state laws, Cometly's reporting of conversion events to advertising platforms may count as "sharing" personal information for cross-context behavioral advertising. Turning off the advertising category in the banner opts you out of it. We do not sell personal information, and nothing from the signed-in Service is ever shared with advertising platforms.
Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of advertising cookies and of sharing for cross-context behavioral advertising, and we honor it automatically on usehenry.ai without you having to use the banner. We treat a Do Not Track header the same way.
Browser and provider controls. Your browser lets you view, block, and delete cookies, usually under its privacy or site settings. Google offers a browser add-on that blocks Google Analytics on every site, and your Google and Meta account settings control the ads those platforms show you. You can clear the local storage the apps use by clearing site data for app.usehenry.ai, and the mobile and desktop apps forget stored preferences when you remove the app. Because every cookie the app itself sets is required for signing in, the Service will not work in a signed-in state if you block or delete them; you can still read the website with cookies disabled.
If this changes
If we add or replace analytics or advertising tools, we will update this page and the cookie banner before doing so, and, where the law requires it, ask for your consent before the new tool sets anything.
Contact
Questions about cookies or this policy: privacy@usehenry.ai. For how we handle personal data more broadly, see the Privacy Policy.