Cookie Notice
This Cookie Notice lists the cookies and similar browser storage that Helios Cloud Suite LLC ("Helios", "we") uses on its website and in the Service, and what each one is for. It adds detail to section 8 of our Privacy Policy, which explains how we handle personal information more generally.
1. Summary
- Our marketing website, helioscloudsuite.com, sets no cookies and loads no analytics or advertising tools. It keeps a few small items in your browser's storage (settings, and the campaign tags of the link you arrived by), listed in section 3.
- The Service sets cookies that are needed to sign you in, keep you signed in and protect your session. None of the cookies we have identified in the Service is used for analytics or advertising.
- When you pay, you are sent to a checkout page hosted by our payment processor, which sets its own cookies (section 4).
2. Cookies and browser storage
A cookie is a small file a website asks your browser to store and send back on later visits. Browser storage ("local storage" and "session storage") is a similar feature that keeps data in your browser for the website's own scripts; unlike a cookie, it is not sent to the website's server automatically. Session storage is cleared when you close the browser tab; local storage stays until you clear it. Cookies set by the website you are visiting are "first-party"; cookies set by another company's website or service are "third-party".
3. Marketing website (helioscloudsuite.com)
The website sets no cookies. It uses the following first-party browser storage:
| Name | Type | Purpose | How long |
|---|---|---|---|
helios-motion |
Browser storage (local) | Remembers whether you chose full or reduced motion on the site. | Until you clear it |
helios-utm |
Browser storage (session) | Keeps the campaign tags (the UTM parameters source, medium, campaign, term and content, each cut to 200 characters) from the link you arrived by, so they can be sent with a contact or sign-up form to tell us which campaign brought you. It is written only when that link carries campaign tags, and nothing in it is sent to Helios unless you submit a form. Today the website stores it without asking first; Helios will add a consent banner before storing it (section 12). | Until the tab is closed |
helios-plan |
Browser storage (session) | Remembers the plan you picked on the pricing page, so it is pre-selected on the sign-up page. | Until the tab is closed |
helios-billing |
Browser storage (session) | Remembers whether you were viewing monthly or annual prices. | Until the tab is closed |
helios-signup-completed |
Browser storage (session) | Marks that a completed sign-up has already been recorded, so it is not counted twice. | Until the tab is closed |
Analytics and advertising. The website does not load any analytics or advertising tools.
4. Sign-up and payment
The sign-up form sends your details to our admin portal (portal.helioscloudsuite.com), which sets no cookies at that step, and then takes you to a checkout page hosted by Stripe, our payment processor. That page is on Stripe's own website, so any cookies there are set by Stripe, not by Helios, and are described in Stripe's own cookie policy. Stripe describes its cookies by category (such as essential cookies for authentication, security and fraud prevention) rather than by name, so this notice describes them by category only; Stripe's cookie policy has the details.
5. Workspace (app.helioscloudsuite.com)
The workspace sets these first-party cookies. All of them are needed for sign-in and security; none is used for analytics or advertising.
| Name | Purpose | How long |
|---|---|---|
oc followed by the server's instance identifier |
Your session with the workspace. | Until you close the browser |
oc_sessionPassphrase |
A key used to encrypt your session data on the server. | Until you close the browser |
__Host-nc_sameSiteCookielax, __Host-nc_sameSiteCookiestrict |
Fixed values the workspace uses to check that requests come from its own pages (protection against cross-site request forgery). They hold no information about you. | Until 31 December 2100 |
nc_username, nc_token, nc_session_id |
Keep you signed in between visits ("remember me"). | 15 days |
The Helios mobile app shows the workspace inside the app and uses the same workspace cookies.
6. Sign-in service (auth.helioscloudsuite.com)
The sign-in service connects your workspace account to the intranet and the admin portal. It sets these first-party cookies while you sign in:
| Name | Purpose | How long |
|---|---|---|
AUTH_SESSION_ID |
Tracks a sign-in that is in progress. | Until you close the browser |
KC_AUTH_SESSION_HASH |
Checks that an in-progress sign-in has not been tampered with. | 60 seconds |
KC_RESTART |
Lets a sign-in that has timed out start again. | Until you close the browser |
After you have signed in, the sign-in service also sets sign-in session cookies that keep you signed in to it.
7. Admin portal (portal.helioscloudsuite.com)
| Name | Purpose | How long |
|---|---|---|
helios_session |
Your signed-in session with the admin portal. It holds a random identifier only; the session itself is kept on our server. | 24 hours |
oidc_state |
Protects the sign-in step against forged requests. | 10 minutes |
8. Webmail (mail.helioscloudsuite.com)
Mail can be read inside the workspace. The separate webmail and mail settings pages set these first-party cookies:
MCSESSID— your session with the mail settings pages. Lasts until you close the browser.- Webmail sets a session cookie after you sign in, to keep you signed in to webmail.
9. Intranet (intranet.helioscloudsuite.com)
The intranet sets no cookies until you sign in. After you sign in it sets a session cookie, SSESS followed by an identifier, which keeps you signed in for about 23 days.
Some intranet pages can show map tiles from OpenStreetMap and icons from Iconify, loaded directly by your browser, so those services receive your IP address and browser details. Helios does not control whether they set cookies; their own policies describe what they do.
10. Office documents (office.helioscloudsuite.com)
Documents open in the editor inside the workspace.
11. Helios staff tools
Helios staff use a separate operations console that sets its own sign-in cookies. It is not available to Customers or website visitors, so its cookies are not listed here.
12. Your choices
You can delete cookies and browser storage, or block them, in your browser's settings. If you block the cookies in sections 5 to 10, you will not be able to sign in to or use the Service. Clearing the website's browser storage only resets the settings listed in section 3.
The helios-utm campaign tags are not strictly necessary. Today the website stores them, for the current tab only, without asking first; to remove them, close the tab or clear the website's browser storage. Helios will add a consent banner, and the website will then store them only if you agree. Everything else listed in this notice is needed for sign-in, security or a setting you chose.
13. Changes and contact
When the cookies we use change, we update this notice and the date at the top. Questions about this notice can be sent to support@helioscloudsuite.com.