cookie policy //

1. what are cookies

Cookies are small text files placed on your device by websites you visit. They are widely used to make sites work, or work more efficiently, and to report analytics.

2. cookies we use

The following cookies may be set on hejes.my:

• ▸hj_vid (analytics, ~1 year): a randomly generated visitor identifier used only when you consent to analytics, to distinguish returning visitors from new ones.
• ▸hj_sid (analytics, session): a session identifier used to group page views into a single visit.
• ▸hj_consent (functional, ~1 year): records whether you accepted or rejected analytics cookies so we do not ask again.
• ▸hj_lang (functional, ~1 year): remembers your language preference (English / Bahasa Melayu).
• ▸hejes_csrf (security, session): protects the admin area against cross-site request forgery.
• ▸__Host-hejes_session (security, ~7 days): the admin operator session cookie. Never set for ordinary readers.
• ▸Form spam check (first-party, temporary): when you use the newsletter or contact forms, your browser solves a small proof-of-work computation locally. Nothing is sent to a third party for this check, and no challenge state is stored.
• ▸Google AdSense advertising cookies (third-party, durations set by Google): set on public pages to serve and measure ads. Controlled by Google, not by our cookie switch — manage them via your browser settings or Google's ad settings.

3. how to manage cookies

You can accept or reject the analytics cookies via the cookie notice on this site, and you can change your preference at any time using the 'cookie settings' link at the bottom of any page.

You can also delete or block cookies through your browser settings. Blocking cookies may affect how the site functions for you.

4. what happens if you reject

If you reject analytics cookies, we do not set the visitor or session identifiers. We still run cookieless analytics using hashed IP aggregates so the site continues to work and our security protections remain in place.

Rejecting analytics cookies does not stop Google AdSense, which loads on public pages regardless — see the advertising note in section 2.