Cookie Information

Essential administrator cookie

After a successful administrator sign-in, Hermes sets the first-party cookie hermes_admin_session. It is strictly necessary to authenticate the administrator, maintain the secure session, and protect certificate-management pages.

• Provider: Hermes (first party).
• Duration: up to 8 hours, or until sign-out or invalidation.
• Attributes: HttpOnly, SameSite=Lax, Path=/, and Secure when served over HTTPS.
• The cookie stores a random session token; the corresponding session record is maintained server-side.

Public visitors

Browsing the homepage, policies, enquiry information, and verification pages does not require a Hermes cookie. Browser or network providers may process ordinary connection data needed to deliver and secure the site, but Hermes does not currently use that data for behavioural advertising or cross-site tracking.

Cookie choices

Because Hermes currently uses only a strictly necessary authentication cookie, no consent banner is shown. Blocking or deleting it will prevent or end administrator access but will not stop normal public browsing.

If Hermes later introduces analytics, embedded media, advertising, or another non-essential technology, this page and the consent controls will be updated before that technology is activated where consent is required.