Cookie Policy
Last updated: April 14, 2025
1. Introduction
This Cookie Policy explains how Leap Hub Inc., doing business as Leap Hub (“Leap Hub”, “we”, “us”, or “our”), uses cookies and similar tracking technologies when you visit or use:
- https://theleaphub.com – our public website
- https://app.theleaphub.com – our authenticated user platform
- https://auth.theleaphub.com – our authentication and identity management subdomain
We use cookies to provide essential services, maintain secure sessions, personalize user language settings, and measure platform performance. This policy explains which cookies we use, why we use them, and your rights regarding their control.
By continuing to use our Site, you consent to our use of cookies as outlined below—unless you withdraw consent via your browser or available controls.
2. What Are Cookies?
Cookies are small data files stored on your device when you visit a website. They serve several purposes, including remembering your preferences, managing sessions, and analyzing traffic.
We use HTTP-only, Secure, and SameSite cookies for secure authentication and session continuity. These cannot be accessed via JavaScript and are only used server-side.
3. Cookies We Use
Here is a list of cookies we currently set on our domains:
| Cookie Name | Domain | Purpose | Type | Expiry |
| _ga, _ga_1TM130F6F8, _ga_R1SSNJ3GJZ, _ga_YHG74PB367 | .theleaphub.com | Google Analytics – property-specific tracking | Performance / 3rd Party | 2 years |
| cf_clearance | .theleaphub.com | Cloudflare security and bot protection | Security / Functional | 30 days |
| access_token | .theleaphub.com | Stores user access token for secure session management (HTTP-only) | Strictly Necessary | Session/Fixed |
| refresh_token | .theleaphub.com | Stores token to refresh sessions without re-login (HTTP-only) | Strictly Necessary | Fixed |
| refresh_token_expiry | .theleaphub.com | Indicates when the refresh token will expire | Strictly Necessary | Fixed |
| token_expiry | .theleaphub.com | Indicates expiration of the current access token | Strictly Necessary | Fixed |
| PHPSESSID | .theleaphub.com / .app.theleaphub.com | PHP session identifier | Strictly Necessary | Session |
| pll_language | .theleaphub.com | Language setting for multilingual WordPress site | Functional | 1 year |
| lang | .app.theleaphub.com | Stores user’s language preference | Functional | Fixed |
| session_start | .theleaphub.com | Timestamp for session creation | Strictly Necessary | Session |
| hjSession | .theleaphub.com | Hotjar session cookie for session recordings | Performance / 3rd-Party | Session |
| hjSessionUser | .theleaphub.com | Hotjar cookie for user recognition on return visits | Performance / 3rd-Party | 1 year |
| sbjs_current, sbjs_current_add, sbjs_first, sbjs_first_add, sbjs_migrations, sbjs_udata | .theleaphub.com | Internal analytics/attribution cookies storing referral and session data | Performance / 1st-Party | Session |
| sbjs_session | .theleaphub.com | Persistent session and referral identifier for analytics | Performance / 1st-Party | 1 year |
| woosw_key | .theleaphub.com | WooCommerce shopping cart session key | Functional | 1 year |
| wp-settings-1, wp-settings-time-1 | .theleaphub.com | Stores admin UI personalization settings in WordPress | Functional | 1 year |
4. Third-Party Cookies
We use Google Analytics to understand user behavior and improve our services. Google may set cookies (_ga) to recognize returning users and gather aggregated usage statistics.
We do not use marketing, retargeting, or ad network cookies.
We also do not sell or share cookie data with third parties as defined by CCPA/CPRA.
5. Your Choices and Cookie Management
You may:
- Disable cookies using your browser’s cookie settings
- Clear all existing cookies from your browser
- Contact us at support@theleaphub.com to withdraw consent for non-essential cookies
- Configure language preference cookies using site footer controls
Note: Disabling strictly necessary cookies (such as access_token or PHPSESSID) may cause login failures or restricted access to the platform.
6. Legal Basis for Processing (GDPR / UK GDPR)
We rely on the following legal bases:
- Consent – for analytics or functional cookies (e.g., _ga, pll_language)
- Performance of a contract – for strictly necessary cookies used for authentication, session security, and access control
7. Data Transfers
Some cookie data (e.g., analytics) may be processed by third-party vendors like Google LLC, based in the United States. Such transfers are governed by the Standard Contractual Clauses (SCCs) or similar legal safeguards.
8. Updates to This Policy
We may update this policy from time to time to reflect changes in our practices or applicable laws. Changes will be posted on this page with an updated effective date.
9. Contact Us
If you have questions or concerns about this policy or your cookie-related rights, contact us at: