Legal

Cookie Policy

Last updated: July 2026 • Effective Date: July 5, 2026

← Back to Home

1. What Are Cookies?

Cookies are small text files stored by web browsers. FaceofMind uses cookies on its website for essential functionality and analytics (where consent is provided). Our mobile applications use secure authentication tokens and device storage instead of browser cookies.

2. Essential Cookies (App & Site)

These cookies are necessary for the website and app to function. They cannot be turned off. They keep you logged in safely and secure network requests.

Cookie / Token TypePurposeTypeExpiration
Authentication SessionMaintains secure login sessionsEssentialSession
Refresh Session IndicatorMaintains authenticated sessions securelyEssential30 days
Theme PreferenceRemembers dark/light mode preferenceEssential1 year
Language PreferenceRemembers interface language selectionEssential1 year
CSRF ProtectionPrevents cross-site request forgery attacksEssentialSession

3. Analytics Cookies (Marketing Site Only)

FaceofMind.com (our marketing website) uses Google Analytics to understand visitor counts, popular pages, navigation flows, and general traffic patterns.

Privacy Protections:

We configure Google Analytics to avoid collecting personally identifiable information and never send wellness data, mood logs, journal entries, or therapist information for analytics purposes.

Important Distinction:

FaceofMind.com (Marketing Site): Uses Google Analytics to track general visitors.

FaceofMind App (iOS/Android): Does NOT use Google Analytics. We do NOT track app users across the web, nor do we send mood data to external analytics engines.

Cookie NameProviderPurposeTypeExpiration
_gaGoogle AnalyticsTracks unique visitor patternsAnalytics2 years
_gidGoogle AnalyticsGroup visitor sessions togetherAnalytics24 hours
_gac_*Google AnalyticsTracks marketing campaign detailsAnalytics90 days
Opt-Out of Analytics: You can block marketing analytics by disabling cookies, enabling "Do Not Track" in your browser, using ad-blocking extensions, or installing the Google Analytics Opt-Out Browser Add-on.

4. What We DON'T Use

No behavioral tracking cookies or cross-site tracking profiles

No third-party marketing pixels (e.g. Facebook pixel, TikTok Pixel)

No user session recording tools (e.g. Hotjar, FullStory)

No advertisement cookies (FaceofMind does not serve ads)

5. Cookie Consent Management

When you first visit FaceofMind.com, a cookie consent banner will ask for your preferences. You can:

  • Accept all cookies (essential + site analytics)
  • Reject non-essential cookies (only essential authentication cookies remain active)
  • Customize specific cookie categories
  • Adjust or withdraw consent at any time in the app settings (Settings → Privacy)

6. Mobile App vs. Web Browser

Mobile App (iOS/Android)

Uses app-level authentication tokens instead of HTTP cookies. All transmission adheres to the same encryption and security standards, and can be managed directly via device application settings.

Web Browser

Uses standard HTTP cookies as detailed above. You can manage or clear these cookies using the privacy tools in your specific web browser.

⚙️7. Managing Cookies in Browsers

You can block or purge cookies through your browser settings:

  • Block all cookies (will affect your ability to log in or use core app functions)
  • Delete existing cookies manually
  • Set notifications when new cookies are dispatched
  • Configure domain-specific permissions

8. Cookie Security

Authentication cookies are transmitted only over HTTPS and are protected using security attributes such as HttpOnly, Secure, and SameSite where applicable.

9. EU Data Protection & GDPR

If you are within the European Union (EU) or EEA, the GDPR guidelines grant you additional rights:

Prior Consent: Analytics cookies do not load until you explicitly opt-in.
Withdrawal: You can withdraw consent for tracking anytime in Privacy Settings.
Anonymization: IP addresses are anonymized and data is kept for a maximum of 14 months.
SCC Agreements: We and our partners execute Standard Contractual Clauses (SCC) for all EU-US data transfers.

10. Do Not Track (DNT)

We do not sell data or track users across external websites. While browser "Do Not Track" (DNT) standards are not universally standardized, FaceofMind does not engage in behavioral advertising or cross-site profiling, ensuring user tracking is not performed regardless of DNT browser settings.

📞11. Questions & Contact

For questions about cookies, privacy, or data subject requests:

Privacy Inquiriesprivacy@faceofmind.com
Technical Issuessupport@faceofmind.com
Data Subject Requests (DPO)dpo@faceofmind.com