Cookie Policy
Effective 2026-06-21 · 2026-06-21
hey ema — Cookie Policy
Effective date: 2026-06-21 Last updated: 2026-06-21
1. About this Cookie Policy
This Cookie Policy explains how By Loci Pty Ltd trading as Hey ema uses cookies and similar technologies on our websites and within Hey ema. This Cookie Policy should be read together with our Privacy Policy.
We use strictly necessary cookies for authentication and security on Hey ema, functional technologies where you opt in to push notifications, performance technologies for error monitoring, and analytics technologies on our documentation site. We do not use marketing or targeting cookies.
2. What are cookies?
Cookies are small text files placed on your device when you visit a website. Similar technologies include pixels, beacons, local storage, IndexedDB, service workers, and SDKs in mobile applications. In this Policy, references to "cookies" include those similar technologies.
Cookies may be:
- First-party (set by us) or third-party (set by another organisation whose service we use);
- Session cookies (deleted when you close your browser) or persistent cookies (which remain for a set period);
- Strictly necessary — required for the site or service to function.
3. Categories we use
| Category | Purpose |
|---|---|
| Strictly necessary | Login, security, and core functionality |
| Functional | Features you opt into, such as push notifications |
| Performance | Error monitoring, reliability, and aggregated service improvement |
| Analytics | Understanding how visitors use our documentation site |
We do not currently use marketing / targeting cookies.
4. Consent and your choices
In jurisdictions where consent is required for non-essential cookies, we ask for it through our cookie banner. You can change your cookie preferences at any time using the "Cookie preferences" link in the footer of our website and on the documentation site.
You can also manage cookies through your browser settings. Browser controls vary; consult your browser's help.
Australia. Australia does not have a specific cookie-consent statute, but the Privacy Act 1988 (Cth) and the Australian Privacy Principles apply to personal information collected via cookies. We give notice of that collection through this Policy and our Privacy Policy.
United States. If you are in California, Colorado, Connecticut, or another US state with a comparable law, we honour the Global Privacy Control signal as an opt-out of sale/sharing and targeted advertising where it is required.
We design our cookie banner so that rejecting non-essential cookies is as easy as accepting them, with no pre-ticked boxes, and we record your consent choices.
5. Cookies and similar technologies we use
5.1 Hey ema application (tenant and platform web apps)
| Cookie / technology | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
hey_ema_session | Hey ema (first-party) | Strictly necessary | Maintains an authenticated session | Session |
hey_ema_csrf | Hey ema (first-party) | Strictly necessary | Cross-site request forgery protection | Session |
Sentry session and replay identifiers (for example sentry-sc; may also use local storage) | Sentry | Performance | Error reporting, performance traces, and masked session replay | Session to 1 year (provider-dependent) |
| Firebase Cloud Messaging token (stored via service worker / browser storage, not a traditional cookie) | Google (Firebase) | Functional | Delivers web push notifications after you grant permission | Until revoked or browser data cleared |
Sentry is configured with text and input masking in session replay. It may still process technical metadata and occasional personal information in error contexts.
5.2 Documentation site (https://docs.heyema.app)
| Cookie / technology | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
ema-docs-cookie-consent | Hey ema (first-party) | Strictly necessary | Records your cookie consent choice | 1 year |
Google Tag Manager and tags loaded through it (for example _ga, _ga_* when Google Analytics is enabled) | Analytics | Aggregated documentation usage statistics | Provider-dependent (often up to 2 years) |
Analytics cookies on the documentation site are set only after you consent through the documentation cookie banner.
6. Changes
We may update this Cookie Policy from time to time. The "Last updated" date will be revised. Material changes affecting your consent will be re-prompted through the cookie banner.
7. How to contact us
privacy@heyema.com or as set out in the Privacy Policy.