Cookie & Browser Storage Policy
Effective date: July 2026 · Last updated: 25 September 2026
This page explains what AskHenry (askhenry.site) stores in your browser, why, and how you can control it. We keep this deliberately simple: third-party analytics and advertising trackers only run if you allow them. With your consent, we use Google Analytics and Microsoft Clarity (Analytics) and Meta Pixel, TikTok Pixel and the OpenAI ChatGPT Ads measurement pixel (Marketing). None of these load until you switch on the matching category in our consent settings, and you can review or withdraw that choice at any time.
1. What we store and why
| Name | Type | Purpose | Category | Retention |
|---|---|---|---|---|
| ah_lang | Cookie | Remembers your language choice (EN / BM / 中文 / 繁體) | Essential | 12 months |
| askhenry_consent | localStorage | Records your cookie choices so we don't ask again | Essential | Until you reset it |
| ah_compare | localStorage | Your project comparison shortlist (like a shopping cart — only stores projects you add yourself) | Essential (functional) | 90 days of inactivity |
| askhenry_visitor_memory | localStorage | Recently viewed projects and areas, property-matcher progress, and preferences you pick (own-stay/investment, budget, area) | Personalisation | Recently viewed: 90 days · Matcher: 60 days |
| ah_viewed, ah_purpose | localStorage | Older technical copies of the above, kept for compatibility | Personalisation | Same as above |
| __oppref | Cookie | Set by OpenAI’s ChatGPT Ads measurement pixel. Stores an anonymous reference that lets us see whether a visit came from one of our ChatGPT ads. It contains no name, email address or phone number. | Marketing | 30 days |
| __obref | Cookie | A random browser reference used by OpenAI to support advertising measurement and attribution. | Marketing | 12 months |
| ah_oppref | localStorage | Our own copy of the ChatGPT ad reference above, so the ad that brought you here is still recognised later in the same visit. | Marketing | 30 days |
| Admin session cookies | Cookie | Sign-in for site administrators only — never set for visitors | Essential | Session |
2. Analytics and advertising
Our consent system uses two categories: Analytics (Google Analytics, Microsoft Clarity) and Marketing (Meta Pixel, TikTok Pixel, OpenAI ChatGPT Ads measurement pixel). Both are off by default — these tools only load after you switch the matching category on in Cookie & Privacy Settings. Google Consent Mode is set to “denied” until you grant consent.
AskHenry does not manually send raw names, email addresses or phone numbers to OpenAI for advertising measurement. The events we send identify the property project being viewed and an anonymous reference for the enquiry. Separately, OpenAI’s measurement pixel may automatically detect supported customer information entered into recognised forms on our website. Where this occurs, the information is normalised and securely hashed in the browser before being sent to OpenAI. Raw customer information is not sent through this automatic matching process.
3. What we never store in your browser
No IC/passport numbers, bank details, loan documents, purchase records, names, phone numbers, email addresses, or the content of your WhatsApp conversations.
4. How to change or clear your choices
- Open Cookie & Privacy Settings (link in the page footer) to change any category.
- Use “Clear my AskHenry browsing preferences” in that panel to erase recently viewed projects, comparisons, matcher progress and preferences.
- Use “Reset cookie choices” to delete your consent record and see the banner again.
- You can also clear everything via your browser’s site-data settings at any time.
5. Access, correction and deletion
Browser storage stays on your device — we can’t see or retrieve it. For anything you have sent us directly (for example a WhatsApp enquiry), you may request access, correction or deletion by emailing henry@askhenry.site.
Note: This page describes our storage practices in plain language and is not legal advice. The wording should be reviewed by a qualified Malaysian privacy professional (PDPA 2010) before being relied on as a compliance statement.