This notice explains how the HMind website uses cookies and similar browser storage. Cookies are small values a website or service stores in your browser and receives with later requests. Similar technologies include local storage and other device storage. HMind uses necessary storage for requested features and, only with your permission, optional analytics described below.
Strictly necessary authentication
HMind uses first-party Better Auth cookies to provide account authentication and session security. Depending on whether the connection is local or HTTPS, the browser may show the session cookie with a secure prefix. When you sign in, HMind uses the following strictly necessary value:
- better-auth.session_token (or its __Secure- prefixed HTTPS form) — authenticates your HMind session and protected account actions.
Exact duration is controlled by HMind’s session configuration and your browser. This value is necessary only when you use account functionality. Blocking it prevents sign-in, session renewal and authenticated account actions.
Security and delivery
Hosting, content-delivery or abuse-prevention providers may set short-lived strictly necessary values to route traffic, apply rate limits, distinguish malicious requests or maintain the security of a requested download. Their exact names and duration can vary as infrastructure changes. They are not used by HMind for advertising profiles.
Checkout and subscription management
If you choose web checkout or billing management, you may leave HMind for a Stripe-hosted page. Stripe may set cookies or similar identifiers necessary for checkout, fraud prevention, security, payment authentication and remembering the checkout session. Apple and Google store purchases occur in their own app/store environments and are governed by their notices. HMind does not control storage set on those external services.
Optional Google Analytics
HMind loads Google Analytics 4 to measure page views and limited product events such as sign-up, sign-in, checkout initiation, subscription management, downloads and viewing a shared map. We send only coarse event labels such as sign-in method, plan or download platform—not names, email addresses, map content, share tokens or payment details. Google Analytics may set _ga and_ga_* cookies to distinguish browsers and sessions. Google may process this information under its own privacy terms.
Analytics remains off until you explicitly allow it. Your choice is stored locally under hmind-analytics-consent. Use Cookie settings in the website footer to withdraw or change that choice at any time; withdrawing consent stops future collection and removes HMind-domain Google Analytics cookies where possible.
What HMind does not use
- No advertising cookies or pixels.
- No cross-site behavioral profiling.
- No cookie or local-storage value for Light/Dark mode; appearance follows your browser or device setting.
HMind lets you decline analytics from the first notice and change that choice later in the footer.
Your controls
You can inspect, delete or block cookies in browser settings. Clearing authentication storage signs you out and may require verification on the next sign-in. Blocking necessary cookies does not prevent browsing ordinary public pages, but account, checkout and subscription-management features may fail. Browser privacy signals do not need a separate sale/sharing response because HMind does not sell personal information or use it for cross-context behavioral advertising.
Changes
We will update this notice when the technologies or purposes materially change. The date above shows the latest revision.
Contact
Questions about browser storage may be sent to support@hmind.app.