Cookie Policy
Last updated: July 22, 2026
This Cookie Policy explains how NorthAnchor Advisory Services Inc. (“NorthAnchor,” “we,” “us,” or “our”) uses cookies and similar technologies when you visit our websites or use services operated by NorthAnchor, including HarbourHub.
This policy should be read together with our Privacy Policy.
1. What are cookies?
Cookies are small text files placed on your computer, tablet, or mobile device when you visit a website. They allow websites to remember information between pages or visits, such as whether you are signed in, your preferences, or security information associated with your session.
Websites may also use similar technologies, including local browser storage, session storage, security tokens, pixels, and server logs. In this policy, we refer to these technologies collectively as “cookies.”
Cookies are commonly used to support sign-in sessions, website security, user preferences, and website functionality.
2. How we use cookies
NorthAnchor currently uses cookies and similar technologies primarily to:
operate our websites and applications;
authenticate users and maintain secure sign-in sessions;
protect our websites against malicious traffic, abuse, and unauthorized access;
remember limited user or website preferences;
process forms and access requests;
maintain the security and reliability of our services; and
understand and resolve technical errors.
We do not currently use cookies in the HarbourHub application for behavioural advertising, targeted advertising, or cross-site tracking.
3. Strictly necessary cookies
Strictly necessary cookies support functions that are required for our websites and applications to operate.
These may include cookies or browser-storage records used for:
user authentication;
maintaining an active session;
account and access security;
fraud, bot, and abuse prevention;
load balancing;
form security;
remembering privacy or cookie preferences; and
maintaining continuity while moving between pages.
Because these technologies are necessary to provide the service requested by the user, they cannot normally be disabled through our website settings.
Blocking strictly necessary cookies through your browser may prevent you from signing in or using important HarbourHub features.
4. Authentication and session technologies
HarbourHub uses Supabase to provide account authentication and session management.
When an authorized user signs in, authentication credentials or session tokens may be stored temporarily in a cookie, local browser storage, or another secure browser-storage mechanism. These records allow the system to recognize the signed-in user and confirm that they are authorized to access the application.
Authentication information is not used for advertising.
Signing out, clearing browser data, or allowing a session to expire may remove or invalidate these records.
Following the planned Canadian database migration, HarbourHub authentication records and primary customer data are intended to be stored in the Canadian Supabase project. Supporting website and application processing may still occur through global infrastructure. The migration assessment confirms that the database, authentication, and storage must be moved to a new ca-central-1 project before HarbourHub can accurately state that its primary customer data is stored in Canada.
5. Security and Cloudflare cookies
Our websites and applications may use Cloudflare for website delivery, security, traffic management, bot detection, rate limiting, and protection against malicious activity.
Depending on the security features active at the time of your visit, Cloudflare may place strictly necessary cookies such as:
CookiePurposeTypical duration__cf_bmHelps identify and manage automated or malicious trafficApproximately 30 minutescf_clearanceRecords that a visitor successfully completed a security challengeVaries according to the security configuration_cfuvidHelps distinguish visitors who share the same IP address for rate-limiting purposesVaries__cflbSupports load balancing and session continuity, when enabledFrom several seconds to approximately 24 hours
Not every visitor will receive every Cloudflare cookie. A cookie may only be created when a particular security or traffic-management feature is triggered or enabled.
Cloudflare describes these cookies as strictly necessary for delivering and protecting its customers’ websites. Cloudflare also states that cookie-related information may be processed in the United States unless specific data-localization services are used.
6. Public and marketing websites
NorthAnchor and HarbourHub public websites may be built or hosted using third-party website platforms, including Squarespace.
These platforms may place cookies required to:
deliver website pages;
secure forms;
remember website or cookie preferences;
prevent fraud and abuse;
provide embedded content;
maintain website performance; and
support administrative or publishing functionality.
The specific cookies used may change when website features, integrations, embedded media, forms, scheduling tools, or analytics settings are changed.
Where optional analytics, marketing, or advertising technologies are added, we will update this policy and provide appropriate cookie choices where required.
7. Functional cookies
Functional cookies remember choices that improve a visitor’s experience but are not always essential to the basic operation of the website.
They may remember:
display or accessibility preferences;
language preferences;
previously selected website settings; or
whether a notice has already been displayed.
NorthAnchor currently limits its use of functional cookies and does not use them to create advertising profiles.
8. Analytics and performance cookies
At the date of this policy, no separate Google Analytics, Meta Pixel, PostHog, or similar analytics tool has been identified in the HarbourHub application.
Our hosting and security providers may still create technical logs or collect limited information necessary to operate, secure, and diagnose the service. This may include:
IP address;
browser and device type;
date and time of access;
requested page or route;
referring page;
system and error information; and
security-event information.
This operational information is used to maintain security and reliability rather than to create advertising profiles.
If NorthAnchor introduces optional website analytics in the future, we will identify those services in this policy and provide any consent or preference controls required by applicable law.
9. Advertising and targeting cookies
NorthAnchor does not currently use HarbourHub cookies for:
targeted advertising;
behavioural advertising;
retargeting;
tracking visitors across unrelated websites; or
selling browsing information.
We do not sell cookie information or website browsing information.
10. Embedded and third-party content
Some pages may contain links to or embedded content from third parties, such as:
video providers;
social-media platforms;
scheduling services;
maps;
document viewers;
payment providers; or
external forms.
When you interact with third-party content, that provider may place its own cookies or collect information according to its own privacy and cookie policies.
NorthAnchor does not control cookies placed directly by independent third-party websites.
Where practical, optional third-party content will not be activated until it is requested by the visitor or appropriate consent has been obtained.
11. Transactional email
HarbourHub uses transactional email to deliver messages such as:
account invitations;
access-request confirmations;
administrative notifications;
password-reset messages;
authentication links; and
service-related notices.
Emails may contain security tokens or links that allow the recipient to complete a requested action. These are not advertising cookies.
Our email provider may also maintain delivery logs, suppression records, and technical information needed to send and protect email. The current HarbourHub assessment found that Lovable’s email infrastructure is not documented as exclusively Canadian.
We do not currently use transactional emails to conduct behavioural advertising.
12. Managing cookies
You can manage or delete cookies through your browser settings.
Most browsers allow you to:
see which cookies are stored;
delete individual or all cookies;
block third-party cookies;
block all cookies;
clear local storage; or
receive a warning before a cookie is stored.
Blocking or deleting cookies may affect website functionality. In particular, you may be signed out of HarbourHub, lose saved preferences, or be unable to access secure features. Both the Office of the Privacy Commissioner of Canada and Cloudflare note that disabling cookies can affect website or session functionality.
13. Consent and necessary technologies
Where required by applicable law, NorthAnchor will request consent before using optional analytics, functional, advertising, or targeting cookies.
Strictly necessary cookies and security technologies may operate without an optional-cookie selection because they are required to provide or protect the service.
Where consent is requested, it should be clear, informed, specific, freely given, and limited to the purposes presented to the user.
14. Processing outside Canada
Customer information and browser information may be processed by service providers operating in Canada, the United States, or other jurisdictions.
Our supporting providers currently include or may include:
Lovable;
Supabase;
Amazon Web Services;
Cloudflare;
Squarespace; and
transactional email providers.
Information processed outside Canada may be subject to the laws of the jurisdiction in which it is processed, including lawful access by courts, law-enforcement agencies, or other government authorities.
NorthAnchor uses appropriate administrative, contractual, and technical safeguards appropriate to the sensitivity of the information and the services being provided.
15. Changes to this policy
We may update this Cookie Policy when:
website technology changes;
new service providers are introduced;
analytics or other optional cookies are added;
legal requirements change; or
our privacy practices are updated.
The updated version will be posted on our Privacy & Trust Centre with a revised “Last updated” date.
16. Contact us
Questions about this Cookie Policy or NorthAnchor’s privacy practices may be directed to:
NorthAnchor Advisory Services Inc.
Email: privacy@northanchor.biz
Privacy & Trust Centre: northanchor.biz/trust