This notice explains how the HMind website uses cookies and similar browser storage. Cookies are small values a website or service stores in your browser and receives with later requests. Similar technologies include local storage and other device storage. HMind uses necessary storage for requested features and analytics described below.
Strictly necessary authentication
HMind uses first-party cookies for sign-in and session security. Depending on whether the connection is local or HTTPS, the browser may show the session cookie with a secure prefix. When you sign in, HMind uses the following strictly necessary value:
- better-auth.session_token (or its __Secure- prefixed HTTPS form) — authenticates your HMind session and protected account actions.
Exact duration is controlled by HMind’s session configuration and your browser. This value is necessary only when you use account functionality. Blocking it prevents sign-in, session renewal and authenticated account actions.
Security and delivery
Hosting, content-delivery or abuse-prevention providers may set short-lived strictly necessary values to route traffic, apply rate limits, distinguish malicious requests or maintain the security of a requested download. Their exact names and duration can vary as infrastructure changes. They are not used by HMind for advertising profiles.
Checkout and subscription management
If you choose web checkout or billing management, you may leave HMind for a Stripe-hosted page. Stripe may set cookies or similar identifiers necessary for checkout, fraud prevention, security, payment authentication and remembering the checkout session. Apple and Google store purchases occur in their own app/store environments and are governed by their notices. HMind does not control storage set on those external services.
Google Analytics
With your consent, HMind loads Google Analytics 4 to measure page views and limited product events such as sign-up, sign-in, checkout initiation, subscription management, downloads and viewing a shared map. We send only coarse event labels such as sign-in method, plan or download platform—not names, email addresses, map content, share tokens or payment details. Google Analytics may set _ga and_ga_* cookies to distinguish browsers and sessions. Google may process this information under its own privacy terms.
Optional analytics stays off until you accept. Your choice is stored locally under hmind-analytics-consent-v2. Use Cookie settings in the website footer to reject, withdraw or change that choice at any time; withdrawing consent stops future HMind analytics events and removes HMind-domain Google Analytics and Clarity cookies where possible.
Microsoft Clarity
With your analytics consent, Clarity records masked interactions and heatmaps on public home, pricing, download and help pages. Recording stops on navigation or when opening an authentication dialog. Pages with query parameters or fragments, account pages, billing, authentication, editors and shared documents are excluded. Clarity may use _clck and _clsk cookies. We do not send account identifiers or enable advertising storage.
Error diagnostics
When configured, Sentry receives technical error types, code locations and release information to diagnose website failures. HMind removes error messages, request data, user identity, breadcrumbs and source snippets before sending. Session replay, performance tracing and log collection are disabled. These diagnostics are separate from optional website analytics.
What HMind does not use
- No advertising cookies or pixels.
- No cross-site behavioral profiling.
- Your appearance preference may be stored locally as hmind-theme; without a preference, appearance follows your device.
HMind lets you reject analytics from the first notice and change that choice later in the footer.
Your controls
You can inspect, delete or block cookies in browser settings. Clearing authentication storage signs you out and may require verification on the next sign-in. Blocking necessary cookies does not prevent browsing ordinary public pages, but account, checkout and subscription-management features may fail. Browser privacy signals do not need a separate sale/sharing response because HMind does not sell personal information or use it for cross-context behavioral advertising.
Changes
We will update this notice when the technologies or purposes materially change. The date above shows the latest revision.
Contact
Questions about browser storage may be sent to support@hmind.app.