Legal
Cookie Policy
Last updated: 2026-06-10
H2ONU uses a small set of first-party cookies and similar local-storage technologies to keep the site working and to measure traffic. We do not use third-party advertising cookies, fingerprinting, or cross-site tracking.
What we use
Strictly necessary
Required for the site to function. You can't opt out without breaking core features.
- h2onu_token — auth session. Set when you log in or sign up. Local storage only; expires after 30 days of inactivity.
- h2onu_cart_v1 — the contents of your cart so they survive page reloads. Local storage; cleared after 30 days of inactivity or on checkout success.
- h2onu_site_bypass — admin / partner bypass for the locked site. Cookie; 24-hour TTL.
Functional
- h2onu_user — a JSON record of your id and email so we can attribute analytics events to you while you're logged in.
- h2onu_ref — the referral code from any affiliate link you arrived through, so we can credit a sale to the referrer if you buy.
Analytics
We log pageviews to our own database for traffic analytics. The data we collect (IP, browser, referrer, timestamp) is held server-side and is not shared with third-party ad networks.
Opting out
- You can clear all H2ONU cookies and local storage via your browser's site-data controls. You'll be logged out and your cart will reset.
- To unsubscribe from email, click the unsubscribe link in any marketing message we send.
Do Not Track
We honor the Global Privacy Control (GPC) signal where your browser sends it. Since we don't do cross-site tracking or sell data, DNT has limited practical effect on our site, but we won't set non-essential cookies when GPC is detected.
Questions
Email support@h2onu.com.