COOKIE POLICY
No Hesi LLC
Last updated: August 26, 2026
1. About This Policy
This Cookie Policy explains how No Hesi LLC, a Wyoming limited liability company (“No Hesi,” “we,” “us,” or “our”), uses cookies and similar technologies on our website, web applications, and game launcher (together, the “Services”).
Our address is 1250 Ave. Ponce de Leon, STE 301 PMB 1414, San Juan, Puerto Rico 00907-3976. We are the party responsible for the cookies described here.
This policy is part of our Privacy Policy, which explains more fully how we handle your personal information, and our Terms of Use.
2. What This Policy Covers
A cookie is a small text file placed on your device when you visit a website. We also use technologies that work like cookies but store information in other ways, including browser local storage, session storage, pixels, and software development kits. In this policy, “cookies” means all of these.
Cookies are either session cookies, which are deleted when you close your browser, or persistent cookies, which stay on your device for a set period or until you delete them. Both are described in the table in Section 5, with the duration for each.
Cookies set by us are first-party cookies. Cookies set by another company through our Services are third-party cookies. Third-party providers handle the information they collect under their own privacy policies, which we link in Section 6.
3. How We Ask For Your Consent
We use a consent banner to manage cookies on our Services.
- Required cookies. These load automatically. Our Services will not work properly without them, so they are not subject to consent.
- All other categories. Functional, Analytics, Marketing, and External Media cookies load only after you opt in to that category.
If you are in the European Economic Area, the United Kingdom, or Switzerland, we will not place any non-required cookie until you consent. You can change or withdraw your choices at any time (See Section 7).
We do not treat continued browsing as consent to non-required cookies.
4. Cookie Categories
| Category | What it does | Loads when |
|---|---|---|
| Required | Security, sign-in, consent recording, and abuse prevention | Always |
| Functional | Remembers onboarding progress and recognizes returning sessions | After Functional consent |
| Analytics | Measures how the Services are used so we can improve them | After Analytics consent |
| Marketing | Measures advertising performance and credits affiliate referrals | After Marketing consent |
| External Media | Loads embedded video and Discord-hosted content | After External Media consent |
5. Cookies We Use
5.1. Required.
These cookies load automatically.
| Name | Provider | Purpose | Data | Type | Duration |
|---|---|---|---|---|---|
cf_clearance | Cloudflare | Blocks malicious traffic; browser security checks | IP address, browser, device, request data | Third party | Up to 1 year |
cookieyes-consent | CookieYes | Records the consent categories you accepted or rejected | Consent choices, consent ID | Third party | 1 year |
auth_session | No Hesi | Keeps you signed in and verifies account access | Session and authentication status | First party | 30 days |
otp_pending | No Hesi | Handles one-time-passcode sign-in | Authentication status | First party | 10 minutes |
create-username-cookie | No Hesi | Supports username creation during sign-up | Authentication status | First party | 1 minute |
redirectTo | No Hesi | Returns you to the right page after sign-in | Return page | First party | Up to 10 minutes |
discord_oauth_state | No Hesi, Discord | Secures Discord sign-in and account linking | Security token | First party | 10 minutes |
google_oauth_state | No Hesi, Google | Secures Google sign-in and account linking | Security token | First party | 10 minutes |
oauth_state | No Hesi | Secures external sign-in generally | Security token | First party | 5 minutes |
code_verifier | No Hesi | Secures the external sign-in exchange | Security token | First party | 10 minutes |
pending_steam_id | No Hesi, Steam | Secures Steam account linking | Temporary Steam identifier | First party | 5 minutes |
pending_steam_metadata | No Hesi, Steam | Holds temporary Steam profile information during linking | Temporary Steam profile data | First party | 5 minutes |
launcher-challenge-id | No Hesi | Connects browser approval to a launcher sign-in request | Authentication challenge ID | First party | Until the challenge expires |
rc::a | Google reCAPTCHA | Prevents automated form submissions and abuse | IP address, browser, device, interaction data | Third party, local storage | Persistent |
rc::c | Google reCAPTCHA | Prevents automated form submissions and abuse | IP address, browser, device, interaction data | Third party, session storage | Browser session |
5.2. Functional.
These cookies load after Functional consent.
| Name | Provider | Purpose | Data | Type | Duration |
|---|---|---|---|---|---|
onboarding_completed | No Hesi | Remembers that you finished onboarding | Onboarding status | First party | Up to 1 year |
known_session | No Hesi | Recognizes a returning session | Session status | First party | 30 days |
5.3. Analytics.
These cookies load after Analytics consent.
| Name | Provider | Purpose | Data | Type | Duration |
|---|---|---|---|---|---|
_ga | Measures visits, page views, and interactions | Page activity, referral source, device information, and, for signed-in users, an internal No Hesi account ID | Third party | Up to 400 days | |
_ga_T8EP8VZRSN | Measures visits, page views, and interactions | As above | Third party | Up to 400 days | |
(no cookie set) | Umami Cloud | Measures page visits and interactions | Page activity, technical request data | Third party | Not applicable |
If you are signed in, our analytics data includes your account ID. That means we can connect the pages you visit and the actions you take to your No Hesi account, rather than to an anonymous visitor. We use this to understand how account holders use the Services. Analytics cookies load only if you consent to the Analytics category, and you can withdraw that consent at any time.
5.4. Marketing.
These cookies load after Marketing consent.
| Name | Provider | Purpose | Data | Type | Duration |
|---|---|---|---|---|---|
rewardful.referral | Rewardful | Credits subscriptions and purchases to an affiliate referral | Affiliate referral ID, conversion data | Third party | About 60 days |
_fbp | Meta | Measures advertising visits and conversions | Page activity, referrer, browser, device, advertising IDs | Third party | 90 days |
_fbc | Meta | Measures advertising visits and conversions | As above | Third party | 90 days |
_gcl_aw | Attributes activity to Google ads | Advertising click and conversion IDs | Third party | 90 days | |
_gcl_ag | Attributes activity to Google ads | As above | Third party | 90 days | |
_gcl_gb | Attributes activity to Google ads | As above | Third party | 90 days | |
_gcl_dc | Attributes activity to Google ads | As above | Third party | 90 days |
Cross-context behavioral advertising. Marketing cookies let Meta and Google measure our advertising and show you ads on other sites and apps. Under some state privacy laws this counts as “sharing” personal information for cross-context behavioral advertising, or as a “sale.” We do not sell your personal information for money. You can opt out of this sharing by rejecting the Marketing category in our consent banner, or by enabling Global Privacy Control in your browser. We honor Global Privacy Control signals as an opt-out request (See Section 8).
5.5. External Media.
These cookies load after External Media consent.
| Name | Provider | Purpose | Data | Type | Duration |
|---|---|---|---|---|---|
YSC | Google, YouTube | Loads and plays embedded videos | IP address, browser, device, video activity | Third party | Browser session |
VISITOR_INFO1_LIVE | Google, YouTube | Loads and plays embedded videos | As above | Third party | About 6 months |
VISITOR_PRIVACY_METADATA | Google, YouTube | Loads and plays embedded videos | As above | Third party | About 6 months |
__Secure-YNID | Google, YouTube | Loads and plays embedded videos | As above | Third party | About 6 months |
__Secure-ROLLOUT_TOKEN | Google, YouTube | Loads and plays embedded videos | As above | Third party | About 6 months |
__cf_bm | Discord, Cloudflare | Loads Discord-hosted avatars and media | IP address, browser, device, request data | Third party | 1 hour |
_cfuvid | Discord, Cloudflare | Loads Discord-hosted avatars and media | As above | Third party | Browser session |
6. Third-Party Providers
These companies set cookies through our Services and handle that information under their own policies.
| Provider | Role | Their privacy policy |
|---|---|---|
| Cloudflare | Security, content delivery | cloudflare.com/privacypolicy/ |
| CookieYes | Consent management | cookieyes.com/privacy-policy/ |
| Analytics, advertising, reCAPTCHA, YouTube | policies.google.com/privacy and google.com/policies/privacy/partners/ | |
| Umami Cloud | Analytics | umami.is/privacy |
| Rewardful | Affiliate attribution | rewardful.com/privacy |
| Meta | Advertising measurement | facebook.com/privacy/policy/ |
| Discord | Sign-in, hosted content | discord.com/privacy |
| Steam (Valve) | Sign-in | valvesoftware.com/privacy_policy |
To opt out of Google Analytics across all sites, you can install Google’s browser add-on at tools.google.com/dlpage/gaoptout.
7. Managing Your Choices
Our banner. Open cookie settings at any time through the link in our website footer to change or withdraw consent for any category.
Your browser. Most browsers let you block or delete cookies, and clear local and session storage, through their settings. Blocking Required cookies will break sign-in and other core features.
Advertising controls. You can adjust ad personalization at adssettings.google.com and in your Meta account settings.
8. Your Privacy Rights
Depending on where you live you may have the right to access, correct, delete, or port your personal information, and to opt out of targeted advertising or the sharing of your personal information. Those rights, and how to exercise them, are set out in our Privacy Policy.
We honor Global Privacy Control signals as an opt-out of the sharing of personal information for cross-context behavioral advertising.
9. Changes To This Policy
We may update this policy to reflect changes in the cookies we use or in the law. We will post the updated policy with a new “Last updated” date, and where the law requires it we will ask for your consent again.
10. Contact Us
Questions about this policy:
Email. [email protected]
Postal mail. No Hesi LLC, Attn: Privacy Team, 1250 Ave. Ponce de Leon, STE 301 PMB 1414, San Juan, Puerto Rico 00907-3976
Discord
TikTok
YouTube
X/Twitter