Cookie Policy

1. Cookies and related technologies

Free basic results and preview PDFs require no account, real name or payment. Answers stay on your device and saving reports is optional. Optional purchases use Stripe-hosted Checkout, which may request an email and billing details. Contact requires its stated fields. Paid access uses a necessary cookie or recovery code, without requiring report saving.

2. What is stored on your device

mind-island-language-v1: localStorage containing the language you manually select; no automatic expiry. It supports your requested language preference.

mind-island-en-v1: optional localStorage for a saved unfinished assessment and score-summary history. Saving starts only after you check the device-saving option. It has no automatic expiry. The current application does not read or change the legacy mind-island-v1 entry.

Temporary page memory holds current answers and contact drafts. A random retry reference helps avoid duplicate contact submissions and stays in memory. Contact does not read assessment storage. Browser cache and downloaded files follow browser and device settings; the application does not use sessionStorage or IndexedDB.

3. Necessary access cookie

__Host-mindcalo-report is a necessary HttpOnly, Secure, SameSite=Strict cookie holding a random secret, not answers or scores. It lasts at most 400 days and may be refreshed. Cookie expiry is not licence expiry. Clearing cookies or changing browsers may require your saved recovery code, with no repeat payment for the same licence. Report saving stays optional and separate. Stripe Checkout has its own cookie practices.

4. Cloudflare security and network reports

Cloudflare may set security cookies when protection applies, such as __cf_bm (documented expiry after 30 minutes of inactivity) or cf_clearance (duration depends on challenge settings). These are conditional examples, not cookies promised on every visit.

The routine response checked on 10 September 2026 set no cookie. Cloudflare response headers can instruct supported browsers to send network failure reports. The observed instruction lasts seven days and requests no successful-connection reports. This lifetime does not describe how long reports are retained.

5. Your controls

Use My reports to delete individual reports or all saved reports and progress. This does not delete the selected language, legacy data, downloaded files or messages already sent. To remove all local site storage, use your browser’s site-data settings for mindcalo.com. Delete downloads separately. Blocking local storage prevents saving but still allows assessments in memory. Blocking security cookies may cause repeated challenges.

There is no optional advertising or analytics tracking to accept or reject, so we do not display an Accept all banner. Device saving is a separate, unchecked choice before an assessment. Future optional tracking must be explained and, where required, remain off until consent. Continued browsing is not consent.

6. Updates and questions

Read the Privacy Policy for providers, contact messages and rights. Use Contact for cookie questions or privacy requests. External sites and your email service have their own cookie practices. We update this inventory when the application or hosting changes.