Skip to content
Client area

Cookies

A cookie is a small file that a site asks the browser to keep and send back on later requests. Some of them the site cannot work without: it would not remember what you chose and could not tell one tab from another. The rest are there for us rather than for you — and are only set with your consent.

The site and the client area live on one domain, host4.biz: the site at the root, the panel at /cp/. That is why the files set by the panel are listed below as well.

The list is current as of 17 September 2026 and has been checked against what is actually connected to the site.

How to change your choice

The “Cookie settings” button in the footer of any page opens the same window as on your first visit: categories can be switched on or off at any time. When you withdraw consent, the matching files are deleted.

The same can be done from the browser — delete the files for host4.biz or block them entirely. Currency selection, remembering your consent and signing in to the client area will stop working then.

Strictly necessary — always set

The site and the panel do not work without them, so consent is not asked for these.

  • h4b_consent — your choice of categories in the consent window. 182 days. Set by the site.
  • october_session — the site’s technical session: form forgery protection, messages between pages. 2 hours. Set by the site.
  • currency — the currency you asked prices to be shown in. 365 days. Set by the site.
  • h4b_affid — the number of the partner whose link brought you here. 90 days. Set by the site to pass the number on to the client area.
  • HBAffiliate — the same on the panel side: this mark is what earns the partner a reward if you register with us. 90 days. Set by the client area.
  • SESSID… — the client area session: it is how the panel knows you are signed in. Until the browser is closed. Set by the client area.
  • Cart-Session — the contents of the cart in the panel until the order is placed. Set by the client area.
  • mfa — second-factor confirmation when signing in to the panel. Set by the client area.
  • cc_cookie — a leftover from the previous version of the consent window. It affects nothing and will go away together with the old scripts.

These show which pages people use and where they get stuck. We look at them in aggregate, not person by person. The lifetimes are set by the services themselves.

  • _ga, _ga_… — Google Analytics 4: tells visitors and sessions apart. 2 years.
  • _pk_id, _pk_ses — Matomo: visitor and current session. 13 months and 30 minutes. We keep Matomo on our own server, so these statistics go nowhere else.

These are needed to see which ads bring customers, and to avoid showing those ads to people who have already ordered.

  • _gcl_au — Google Ads: links a click on an ad to an order. 90 days. If you came straight from an ad, _gcl_aw is added.
  • _fbp, _fbc — Meta Pixel: the same for ads on Facebook and Instagram. 90 days.
  • fr — Meta: ad delivery and targeting. 90 days. The only one on this list set not by our domain but by facebook.com itself.

Payment

When you pay for an order, the payment page belongs to the payment service, and it sets its files there under its own rules. We neither influence them nor have access to them.

What we do not do

We do not sell this data or pass it to third parties beyond what is described above, and we do not use cookies to establish your identity. How we handle personal data is described in the privacy policy.