Cookie Notice
Every cookie we are prepared to set, named, with what it does and how long it lasts. Nothing that measures or advertises to you loads until you permit it, refusing takes exactly one click, and you may change your mind from the footer of any page.
01In one sentence
Nothing that measures or advertises to you is set until you say it may be. When you first arrive you are asked, plainly, and refusing is one click — the same one click as accepting. The site works identically either way, and you may change your mind at any moment from the footer of any page.
Until July 2026 this website set no cookies whatsoever. We have since begun advertising, and advertising that cannot be measured is money set on fire — so we now ask permission for the two categories in §4 and §5. We said on this page that if it ever changed we would put up a proper consent banner and say so here on the same day. This is us keeping that promise.
02The three categories
| Category | Set without asking? | What it is for |
|---|---|---|
| Strictly necessary | Yes — no consent is required by law, and none is pretended | Makes the site work and remembers this very choice. |
| Measurement | No — only if you allow it | Which pages are read, where visitors give up. |
| Advertising | No — only if you allow it | Showing our houses to you elsewhere, and knowing which advertisement worked. |
Refusal is not a lesser experience. No content is withheld, no feature is disabled, and you will not be asked again on every page.
03Strictly necessary
These are exempt from consent because without them the thing you asked for does not work. There are two.
| Name | Kind | What it does | How long it lasts |
|---|---|---|---|
| hypomo-arrived | sessionStorage | Records that you have already watched the opening title sequence, so it is not replayed at you on every page. | Until you close the browser tab |
| hypomo-consent | First-party cookie | Remembers the choice you made about the categories below — so we neither ask you again nor load anything you refused. | 12 months |
Neither holds an advertising identifier. Neither is readable by anyone but us. The consent cookie exists precisely so that your refusal is honoured on the next page rather than forgotten.
Server logs also record the ordinary details of each request — IP address, time, page, browser — as any web server must in order to serve a page and defend itself. See the Privacy Notice, §3 and §8.
04Measurement
Vercel Web Analytics runs whatever you choose. It is served from our own domain, sets no cookie, and builds no persistent identifier — we see totals, not people — so it needs no consent and is not in the card.
Google Analytics 4 runs only if you permit Measurement. It uses cookies to recognise a returning browser and to stitch a visit together, so that we can see which pages lead to an enquiry and which lose people.
| Who | Typical cookies | What for | How long |
|---|---|---|---|
| Google Analytics 4 | _ga, _ga_* | Distinguishes one browser from another and groups page views into a single visit. | Up to 2 years |
Where Google Analytics is active we enable IP anonymisation. If you refuse this category, Google's own consent signals are set to denied and the tag is never loaded at all — not loaded-but-restrained.
05Advertising and remarketing
This is the category that follows you off this website, and we would rather describe it bluntly than bury it.
If you allow it, Google, Meta and LinkedIn may recognise this browser. That lets us do two things: show our advertising to people who have already visited us — which the trade calls remarketing — and see which advertisement led to an enquiry, so we stop paying for the ones that lead nowhere.
| Who | Typical cookies | What for | How long |
|---|---|---|---|
| Google Ads | _gcl_*, and cookies set on google.com / doubleclick.net | Remarketing audiences and conversion measurement. | Up to 2 years |
| Meta (Facebook, Instagram) | _fbp, and cookies set on facebook.com | Custom audiences and conversion measurement for advertising on Meta's platforms. | Up to 3 months (_fbp) |
| li_sugr, UserMatchHistory, bcookie, lidc | Audience matching and conversion measurement on LinkedIn. | Up to 2 years |
These vendors are independent controllers for what they do with the data on their own platforms; their own notices govern that, and we cannot vary them. Where the data reaches the United States, the transfer safeguards in the Privacy Notice, §7 apply.
We will not build advertising audiences from what you told a concierge, from anything in your client file, or from any document supplied for due diligence. Advertising works from website behaviour and nothing else. We will not sell or share your details with a data broker, and we do not buy lists.
06The voice concierge
The bell in the corner opens a desk you may speak to. Until you ring it, nothing is loaded from Google and no audio is captured. Ringing it opens a direct connection from your browser to Google's Gemini service for the length of the conversation.
This uses no cookies. The transcript you see lives in the page's memory and vanishes when you close the desk. What Google does and does not receive is set out in full in the Privacy Notice, §5, which we ask you to read before speaking to it.
07The mortgage application
Our mortgage application lives on a separate address — app.hypomo.com — and is built on a third-party platform. Unlike this website, it does set cookies, because it has to: it signs you in and must remember that you are signed in from one page to the next.
| What | Why | How long |
|---|---|---|
| Session cookies set by the application platform | Strictly necessary — they keep you logged in and protect the form against cross-site request forgery. | Typically a few days, or until you sign out |
Those cookies are strictly necessary for a service you have actively asked for, so they need no consent. They are set by that application, not by this website, and this notice does not cover the rest of its behaviour.
08How to refuse, change or erase
You are in control, and nothing on this site punishes you for exercising it.
Change your mind, at any time
Cookie preferences sits in the footer of every page. It reopens the card with your current settings, and a change takes effect immediately — refuse a category and its tags are not loaded again on the next page. Withdrawing is deliberately no harder than consenting.
Withdrawal stops future collection. It cannot reach into Google's or Meta's systems and delete what was already gathered while you permitted it — for that you must use their own controls, or ask us and we will pass the request on.
Erase what is already there
Clear site data for hypomo.com in your browser's settings and everything above is gone, including the record of your choice — so you will be asked afresh on your next visit. Closing the tab alone clears hypomo-arrived.
Block it wholesale
Every major browser can block cookies and site storage, per site or entirely — look under Privacy, or Site settings. Private browsing discards everything on exit. Any content-blocker will stop these scripts loading. The site works perfectly with all of it blocked, and we have checked that it does.
Opt out at the source
You may also switch off personalised advertising directly with the vendors, which covers every site rather than only ours: Google at myadcenter.google.com, Meta in your account's ad preferences, and LinkedIn under advertising data settings.
The concierge
Do not ring the bell and it never runs. Refusing the microphone stops it capturing anything. It sets no cookies and is not part of the advertising category.
09Changes
If we add anything that stores data on your device or measures you in a way this page does not describe, we will update this page and, where the law requires consent, ask for it before the thing loads. The revision date at the top tells you when we last looked.
Questions to register@hypomo.com.
The house
MFM Ventures Ltd
Registered in Malta · C 113871
Office 24, SOHO, The Strand, Triq l-Imsida, Gżira GZR 1401, Malta
Write to us
register@hypomo.com
Answered within five working days.
Supervisory authority
Information and Data Protection Commissioner
idpc.org.mt