Legal
Cookie Policy
Last modified 12 August 2026 · Effective 12 August 2026
What cookies we use
A cookie is a small text file a website stores on your device. This Site uses a small number of first-party cookies. It loads no third-party advertising cookies and no social media trackers. If you choose to play the yacht film, Vimeo may set its own cookies in the embedded player.
| Cookie | Purpose | Type | Lifetime |
|---|---|---|---|
__Host-syh_session | Records that you have signed in, so the portal can keep you signed in. Contains a random session token, not your password. | Strictly necessary | Up to 12 hours; the session ends after 60 minutes of inactivity. |
__Host-syh_otp | Binds a one-time email code to the browser that requested it, so the code cannot be used in a different browser. | Strictly necessary | 10 minutes |
__Host-syh_invite | Temporarily holds the invitation token after an invitation link is opened, so the sign-in flow can identify the invitation without leaving its token in the address bar. | Strictly necessary | Until the invitation expires, for no more than 7 days. |
__Host-syh_media | Allows the server to confirm short-term access to NDA-protected yacht photographs and film without querying the database for every media request. | Strictly necessary | 60 minutes |
__Host-syh_wa | Binds a single-use passkey challenge to the browser while you register or use a passkey. | Strictly necessary | 5 minutes |
__Host-syh_staff | Authenticates an SYH staff member to the staff interface. Set only for SYH staff. | Strictly necessary | Up to 12 hours; the session ends after 60 minutes of inactivity. |
__Host-syh_staff_otp | Binds a one-time staff sign-in code to the browser that requested it. Set only for SYH staff. | Strictly necessary | 10 minutes |
syh_demo | Records a valid demo password only when the portal is deliberately configured for its prototype demo gate; it is not used for ordinary member sign-in. | Strictly necessary | 30 days |
We do not use Vercel Web Analytics or another hosting-provider aggregate traffic measurement service. See the Privacy Policy for what our own member activity records capture.
We also use a small amount of your browser’s sessionStorage to recognise that several pages belong to one continuous visit, so that moving between pages is recorded as one session rather than many. It is cleared when you close the tab. We do not use storage of any kind to track you across other websites, and we do not fingerprint your device.
Activity measurement and your consent
We do not set an analytics cookie. After you sign in, the portal records the pages you read and the time you spend on them through its member activity beacon, as described in the Privacy Policy.
We have taken that approach rather than a cookie banner because a banner would be the weaker form of consent here: it would ask you to agree to “analytics” in the abstract, after the fact, whereas the access screen tells you specifically what is measured before you decide to proceed. See the Privacy Policy for the detail of what is recorded.
Controlling cookies
You can block or delete cookies through your browser settings. Blocking __Host-syh_session will prevent you from staying signed in and the Site will not work. Blocking a one-time code, invitation, media-access, or passkey-challenge cookie may prevent that part of the sign-in or protected-media flow from working.
Browser instructions: Chrome, Safari, Firefox, Edge.
Because we do not serve advertising or share information with advertising networks, “Do Not Track” and Global Privacy Control signals do not change what we collect. We already do not do the things those signals are designed to stop.