Cookie Policy
This Cookie Policy explains what cookies are, which cookies HOAReview.com uses and why, which are set by third parties, and how you can manage your preferences. You can update your cookie choices at any time through the Cookie Settings panel in the site footer.
1. What Are Cookies
Cookies are small text files that a website stores on your device — in your browser or in local storage — when you visit. They allow the website to recognize your device on subsequent visits, remember preferences, maintain your login session, and gather information about how you interact with the site.
Cookies can be classified by duration: session cookies are deleted when you close your browser; persistent cookies remain on your device for a set period or until you delete them. They can also be classified by origin: first-party cookies are set by HOAReview.com; third-party cookies are set by other domains whose content appears on our pages.
In addition to traditional cookies, HOAReview.com uses browser local storage — a mechanism that allows websites to store key-value data in your browser without an expiration date. We use local storage for your cookie consent preferences and your theme selection (light/dark mode). Local storage data is not transmitted to servers automatically the way cookies are; it is only accessed when you visit the site.
2. Cookie Categories We Use
We group our cookies and local storage usage into four categories. The table below summarizes each category, its purpose, specific examples, and whether you can opt out.
| Category | Purpose | Examples | Can Opt Out? |
|---|---|---|---|
| Strictly Necessary | Required for core Service functionality. The Service cannot function properly without these. | NextAuth session token (keeps you logged in); CSRF protection token; cookie consent record (hoa_cookie_consent in localStorage) | No — these are set regardless of consent choices. You may delete them via browser settings, which will log you out. |
| Analytics | Help us understand how users navigate and use the Service so we can improve features and fix issues. | Page view tracking; session duration; feature usage events; error reporting; performance timing data | Yes — opt out via Cookie Settings in the site footer. Opting out disables analytics data collection for your browser. |
| Functional | Enable enhanced personalization and convenience features beyond strict necessity. | Theme preference (light/dark mode, stored in localStorage); remembered form field state; last-viewed HOA community | Yes — opt out via Cookie Settings. Opting out resets these preferences on each visit. |
| Targeting | HOAReview.com does not currently serve targeted or behavioral advertising. No targeting cookies are set by us. | None at this time. If this changes, we will update this policy and request renewed consent before setting any targeting cookies. | N/A — not applicable at this time. |
Your consent preferences are stored in your browser's local storage under the key hoa_cookie_consent as a JSON object recording your choices for each non-essential category and the timestamp of your selection. This record itself is strictly necessary — without it, the consent banner cannot remember your choices.
3. Third-Party Cookies
Some functionality of the Service is provided by third parties who may set their own cookies when you interact with their features. HOAReview.com does not control third-party cookies; they are governed by the third party's own privacy and cookie policies.
Microsoft Azure
HOAReview.com's infrastructure runs on Microsoft Azure. Azure's Application Gateway and CDN components may set session-level cookies for load balancing and DDoS protection purposes (for example, the ARRAffinity cookie used to route requests to a consistent backend instance). These cookies contain no personally identifiable information and are session-scoped. They are set by Azure infrastructure and are strictly necessary for service delivery.
Stripe
When you access subscription or payment features, Stripe, Inc. — our PCI-DSS Level 1 payment processor — may set cookies on pages that load Stripe's JavaScript libraries (stripe.js). Stripe uses these cookies to detect fraud, maintain checkout session state, and for risk scoring. Stripe cookies are set by stripe.com and js.stripe.com domains. They are necessary for payment processing and cannot be disabled without breaking checkout functionality. Stripe's cookie and privacy practices are described at stripe.com/privacy.
Google (OAuth)
If you choose to sign in with Google, the Google OAuth flow sets Google authentication cookies on accounts.google.com. These are set and controlled by Google under Google's Privacy Policy and are required for the OAuth flow to complete. We do not receive or store Google authentication cookies on our servers.
4. Managing Your Cookie Preferences
You have three methods for managing the cookies and local storage data set by HOAReview.com:
Method 1 — Cookie Settings Panel
Click "Cookie Settings" in the site footer to open our consent manager. You can toggle Analytics and Functional cookies on or off individually, or use "Accept All" and "Reject All" shortcuts. Your selection is saved immediately to local storage. This is the recommended method as it allows granular control without affecting login or core functionality.
Method 2 — Browser Settings
All major browsers allow you to view, block, or delete cookies through the browser's privacy or settings panel. Refer to your browser's help documentation for specific instructions:
- Google Chrome — Settings → Privacy and Security → Cookies and other site data
- Mozilla Firefox — Settings → Privacy & Security → Cookies and Site Data
- Safari — Settings → Privacy → Manage Website Data
- Microsoft Edge — Settings → Cookies and site permissions → Cookies and site data
Blocking all cookies through browser settings will prevent you from logging into HOAReview.com, as the session token is a strictly necessary cookie. If you block cookies, you can still browse public HOA profiles and reviews without an account.
Method 3 — Clearing Local Storage
To reset your consent preferences and see the consent banner again, clear the local storage for hoareview.com in your browser's developer tools (Application tab → Local Storage → hoareview.com → delete the hoa_cookie_consent key). You can also clear all local storage for the site by selecting "Clear site data" in your browser settings, but note this will also reset your theme preference.
5. Do Not Track and Global Privacy Control
Some browsers transmit a "Do Not Track" (DNT) signal indicating that the user does not want to be tracked across websites. There is no binding industry standard for how websites must respond to DNT signals, and HOAReview.com does not currently alter its data collection practices in response to browser-level DNT signals.
The Global Privacy Control (GPC) is a browser-level signal that communicates a user's opt-out from the sale and sharing of personal information under CCPA/CPRA and similar state laws. HOAReview.com honors GPC signals as a valid opt-out from any future sale or sharing of personal information for cross-context behavioral advertising. As stated in our Privacy Policy, we do not currently sell personal information or share it for targeted advertising — so receiving a GPC signal does not change our current default data practices, but the opt-out is recorded and honored.
To enable GPC in your browser, install a compatible browser extension such as Privacy Badger or the DuckDuckGo browser, or use a browser that sends GPC natively. Your browser will transmit the GPC signal automatically on subsequent visits to HOAReview.com.
6. Changes to This Policy
We will update this Cookie Policy when our cookie practices change — for example, if we add new analytics tools, begin serving advertising, or add new third-party integrations. Material changes will be reflected by an updated effective date and may trigger a new consent prompt. We will post a notice on the Service when this policy is updated.
7. Contact Us
Questions about our cookie practices? Contact our Privacy team: