Hashtags Studios uses cookies, local storage, and session storage to operate the platform. This page lists every cookie we set, what it does, and how long it stays. It should be read together with our Privacy Policy.
On your first visit a cookie banner asks for your consent. Strictly-necessary cookies are always set because the platform cannot function without them; all other categories (functional, analytics) are optional and are only set if you accept them. You can decline non-essential cookies at the banner, and you can change your choice at any time — see "Managing consent" below. Declining non-essential cookies will not block you from using the platform.
02
Strictly necessary
Cookie
Purpose
Lifetime
next-auth.session-token
Authentication. Tied to your account; rotated when admins force-logout via tokenVersion bump.
30 days
next-auth.csrf-token
Cross-site request forgery protection on auth endpoints.
Session
NEXT_LOCALE
Stores your selected language (en / ar / fr / es / ...).
12 months
theme
Light / dark / system theme preference.
12 months
hs-cart
Cart state for the marketing + products marketplace (server-backed for authed users).
Session
cookie-consent
Records your granular cookie-consent choices (necessary / analytics / marketing) set in the preferences panel below.
12 months
These cannot be turned off — the platform will not function without them.
03
Functional
Cookie
Purpose
Lifetime
hs-recent
"Recently viewed" pills on talent / job / event pages.
Turning these off resets the platform to defaults on each page load.
04
Analytics
We collect anonymised aggregate usage data: page view counts, click-through rates on featured listings, search-result conversion rates, error rates per route. No IP or fingerprint is stored alongside these events.
Cookie
Purpose
Lifetime
hs-analytics-id
Random opaque ID used to deduplicate sessions in funnel reports. Not linked to your account.
12 months
You can opt out by clearing this cookie or disabling analytics in your account settings.
05
Anti-abuse + rate limiting
Server-side rate limits are keyed by IP + account ID for sign-in, KYC submission, message send, and report submission. These rely on short-lived in-memory counters, not cookies.
06
What we do NOT use
Third-party advertising trackers (Google Ads, Meta Pixel, TikTok Pixel, etc.) — none are loaded by the platform.
Cross-site behavioural tracking cookies.
Fingerprinting libraries.
Cookie-based remarketing.
We do not sell cookie data to third parties.
07
Managing consent
Your granular choices (necessary / analytics / marketing) are stored in the cookie-consent cookie and can be changed at any time from the Manage cookies panel on this page. The first-visit banner records a simpler accept-all / essential-only choice in hs_cookie_consent local storage. Strictly-necessary cookies cannot be disabled. No third-party advertising or marketing scripts are loaded today — the marketing toggle only records your preference for any such feature we may add later.
To clear all cookies set by Hashtags: open your browser settings and remove cookies for the hashtagsstudios.com domain. You will be signed out and your preferences will reset.
08
Third-party processors
When you make a payment, Stripe sets its own cookies on the Checkout page to fight fraud. When we send email via Resend, no cookies are involved. Google Translate runs server-side and does not touch your browser.
09
Changes + contact
Material changes will be announced in-app and via email. Questions: privacy@hashtagsstudios.com (or via /contacts).
This content can be updated live by an admin from /admin/settings (key: legal.cookie).
Preferences
Manage cookies
Strictly-necessary cookies are always on so the platform works. The rest is your call.
Strictly necessaryAuth, cart, CSRF, language. Always on.