HerovantHerovant
English
  • English
  • Español
  • Deutsch
  • Türkçe
PricingSign inJoin waitlistJoin
  • Pricing
  • Sign in

Language

  • English
  • Español
  • Deutsch
  • Türkçe

Cookie Policy

Last updated: September 30, 2026

This policy lists the cookies and similar browser storage Herovant sets. For how we handle personal data in general, see the Privacy Policy.

Contents

  1. Analytics only with your consent
  2. Cookies we set
  3. Browser storage
  4. Analytics cookies (public website only, with your consent)
  5. Other companies
  6. Your choices
  7. Changes and contact

Analytics only with your consent

Inside the Herovant app (app.herovant.com), the client portal and the sign-in pages there is no analytics, advertising or tracking, and no third-party scripts, fonts or widgets are loaded. On the public marketing website (herovant.com) we measure visits with Google Analytics and Microsoft Clarity, loaded through Google Tag Manager, but only if you accept analytics in the cookie banner. Everything else on this list is strictly necessary or remembers a choice you made (your language, your theme, your cookie choice). We never use advertising cookies.

Cookies we set

NamePurposeLifetime
better-auth.session_tokenKeeps you signed in. On the live site the name starts with __Secure-. Strictly necessary; not readable by scripts (HttpOnly).Up to 7 days, renewed while you use the service; removed when you sign out.
better-auth.two_factorLinks your password step to the two-factor code step while you sign in. Strictly necessary; only set if your account uses two-factor authentication.A few minutes.
better-auth.trust_deviceSet only if you tick “trust this device” when confirming a two-factor code, so this device is not asked for a code every time.30 days.
better-auth.stateProtects the round trip when you choose “Continue with Google”. Only set at that moment.5 minutes.
herovant-localeRemembers the language you chose or last visited (English, Spanish, German or Turkish). Contains no personal data.1 year.
herovant-consentRemembers your choice in the cookie banner (analytics or necessary only). Set only on herovant.com. Contains no personal data.6 months.

Requests are protected against cross-site forgery by origin checks and SameSite cookie settings; there is no separate CSRF cookie.

Browser storage

NamePurposeLifetime
herovant-locale (local storage)A copy of your language preference, read by the signed-in app.Until you clear your browser data.
herovant-workspace (local storage)The identifier of the workspace you last opened, so the app reopens it.Until you clear your browser data.
theme (local storage)Remembers your colour theme choice (light, dark or follow your system). Contains no personal data.Until you clear your browser data.
herovant.pending-waitlist-invite (session storage)Holds an invitation code for a few minutes while you go through Google sign-in, so it is not lost.At most 15 minutes, this tab only.

Nothing is written to browser storage that contains a password, a session token or payment information.

Analytics cookies (public website only, with your consent)

These cookies are set only on herovant.com marketing pages, and only after you click “Accept analytics”. Until then, and if you click “Reject”, none of them is set. They are never set in the Herovant app or the client portal.

NamePurposeLifetime
_gaGoogle Analytics: a random identifier that recognises your browser between visits so visits can be counted.2 years.
_ga_<id> (for example _ga_ABC123)Google Analytics: keeps the state of your current session.2 years.
_clckMicrosoft Clarity: stores a pseudonymous Clarity user identifier and settings.1 year.
_clskMicrosoft Clarity: joins your page views into one session recording.1 day.
CLID, MUID, ANONCHK, MR, SMMicrosoft Clarity: identifiers Microsoft uses to recognise a browser across sites that use Clarity and to keep them in sync. Set by Microsoft (clarity.ms), not by us; Clarity does not use them for advertising.Up to 1 year, set by Microsoft.

Google Ireland Limited and Google LLC (Google Analytics) and Microsoft Corporation (Microsoft Clarity) receive data when these tags load. See our Privacy Policy for what is processed and where. To change your mind at any time, use “Cookie settings” in the footer of the website: choosing “Reject” switches analytics off and removes these cookies from your browser.

Other companies

When you choose Google sign-in, or go to the payment page of Lemon Squeezy to subscribe, you leave Herovant and those services apply their own cookies under their own policies. Our network provider, Cloudflare, may set strictly necessary security cookies to protect the site from abuse; we do not control these and use them for nothing else.

Your choices

You can delete or block cookies in your browser settings. Blocking the necessary cookies will stop sign-in from working; deleting the language cookie simply resets your language. Analytics is off until you accept it, and you can withdraw at any time with “Cookie settings” in the website footer, as easily as you gave it.

Changes and contact

If we add or change a cookie that is not strictly necessary, we will update this list and ask for your consent first. Questions: privacy@herovant.com.

HerovantHerovant
PricingPrivacyTermsRefundsCookiesSign in
English
  • English
  • Español
  • Deutsch
  • Türkçe

Herovant © 2026 · All rights reserved.