1. What cookies are
Cookies are small text files placed on your device by a website. We also use functionally similar technologies — browser local storage, session storage and pixels in email. This policy covers all of them.
2. Categories we use
- Strictly necessary — authentication session tokens, CSRF protection, load balancing, and your record of accepted policies. These cannot be switched off; without them the Platform will not function and you cannot stay signed in.
- Functional — your language and time-zone preference, dismissed banners, and draft form state. Disabling these degrades convenience but not core function.
- Analytics — aggregate, first-party measurement of page views, feature usage and errors so we can improve the product. Set only where permitted, and in consent jurisdictions only after you allow them.
- Payment and fraud prevention — cookies set by our payment processor during checkout to authenticate the session and detect fraud.
- Marketing — we do not currently set third-party advertising or cross-site tracking cookies, and we do not sell or share personal information for cross-context behavioural advertising.
3. Third parties that may set cookies
Our payment processor (during checkout and billing portal), our authentication and database provider (session cookies), and — where you connect them — Google and Microsoft calendar or meeting services. Each is governed by its own cookie and privacy policy.
4. How long they last
Session cookies are deleted when you close the browser. Persistent cookies last from a few days up to twelve months, depending on purpose. Authentication tokens refresh on a rolling basis and expire when you sign out.
5. Your choices
You can delete or block cookies through your browser settings, and most browsers offer a Do Not Track or Global Privacy Control signal — we honour Global Privacy Control as an opt-out of sale or sharing where applicable law requires. Blocking strictly necessary cookies will prevent you from signing in or booking. You can withdraw analytics consent at any time from your dashboard privacy settings or by contacting privacy@mindlabcoaches.com.