Cookies
Updated on October 27, 2026
Hypepen uses no cookie that requires consent: no advertising, no cross-site tracking. That’s why there is no banner. Only an X post you ask to show can bring X’s cookies (see below). This English version is provided for information. In case of difference, the French version prevails.
The cookies used
hp_locale: remembers the language you chose. Duration: 12 months.
hypepen.session_token and the related technical login cookies (including the two-factor authentication one): keep you logged in and secure your session. Duration: 30 days at most. They are strictly necessary for the Service and exempt from consent.
Stripe may set its own technical cookies on its payment page, needed for payment security and fraud prevention.
Browser storage
A few display preferences (for example a hint already closed or the sidebar state) are kept in your browser. They never leave your device and are not used for any tracking.
The “Always show posts from X” choice (hp_x_embeds), if you ticked it, is kept there too.
Audience measurement
Umami, self-hosted by Hypepen on its Contabo server in Germany, measures audience: no cookies or browser storage, IP address not kept, no personal data (no email, no X handle, no typed text). Visits are grouped by an anonymous fingerprint renewed every month. It does not require consent, and it stops if your browser asks not to be tracked (Do Not Track).
X posts shown on request
In Stats, “Your best posts” first shows a Hypepen card (date and numbers), without loading anything from X. The post itself only appears if you click “Show the post”: your browser then loads X’s embed module (platform.twitter.com), which may set its own cookies and receives your IP address, under X’s privacy policy. Hypepen asks X not to use it to personalize what it shows you (the embed’s “Do Not Track” option).
If you tick “Always show posts from X”, this choice is kept in your browser (hp_x_embeds) and posts show up without a click. Untick the box in the same place to go back to showing them on request.
Managing cookies
You can delete or block cookies in your browser settings. Blocking session cookies prevents you from staying logged in to the Service.
If this changes
If a purpose requiring consent is ever added, an “Accept all” or “Refuse all” choice of equal weight will be offered to you before anything is set.