What this covers
This policy explains the cookies and similar technologies (local storage, pixels, SDKs) used on www.mindfriend.com, by us or by providers acting for us. It is read alongside our Privacy Policy.
The cookies we use
We keep cookies to a minimum. We use no analytics cookies, no marketing/advertising cookies, and no functional/preference cookies. The full list:
accessToken
- Set by
- MindFriend
- When
- when you sign in
- Purpose
- keeps you signed in during your visit
- Duration
- short-lived
- Category
- Strictly necessary
refreshToken
- Set by
- MindFriend
- When
- when you sign in
- Purpose
- renews your session securely
- Duration
- up to ~12 months
- Category
- Strictly necessary
__stripe_mid
- Set by
- Stripe
- When
- on pages with payment functionality
- Purpose
- payment fraud prevention
- Duration
- 1 year
- Category
- Strictly necessary
g_state
- Set by
- When
- only if you use “Sign in with Google”
- Purpose
- supports Google sign-in
- Duration
- ~6 months
- Category
- Strictly necessary (for that sign-in method)
_GRECAPTCHA
- Set by
- When
- only on pages with forms
- Purpose
- bot/abuse protection (reCAPTCHA)
- Duration
- 6 months
- Category
- Strictly necessary (security)
| Cookie | Set by | When | Purpose | Duration | Category |
|---|---|---|---|---|---|
| accessToken | MindFriend | when you sign in | keeps you signed in during your visit | short-lived | Strictly necessary |
| refreshToken | MindFriend | when you sign in | renews your session securely | up to ~12 months | Strictly necessary |
| __stripe_mid | Stripe | on pages with payment functionality | payment fraud prevention | 1 year | Strictly necessary |
| g_state | only if you use “Sign in with Google” | supports Google sign-in | ~6 months | Strictly necessary (for that sign-in method) | |
| _GRECAPTCHA | only on pages with forms | bot/abuse protection (reCAPTCHA) | 6 months | Strictly necessary (security) |
Because every cookie above is strictly necessary for a service you request, we consider that no cookie consent banner is required under PECR — and we set nothing else. If our cookie use ever changes, we will update this policy and introduce consent controls before any non-essential cookie is set.
Third-party services that set their own cookies
- Google reCAPTCHA (v3) loads only on pages with forms (such as sign-in and registration) to protect them from automated abuse. It sends device/usage signals to Google (United States) — an international transfer safeguarded as described in Privacy Policy §6/§7. Where Google’s own services load (reCAPTCHA, Sign-in with Google), Google may set cookies on its own domain under its own policies.
- Stripe: when you complete payment steps, or a Professional completes payout onboarding, on Stripe-hosted pages, Stripe sets its own cookies on its own domain under Stripe’s privacy and cookie policies.
Your choices
Because we use only strictly-necessary cookies, no consent banner is required and there is nothing to opt into or out of on our side. You can still control or delete cookies at any time through your browser settings; note that deleting the sign-in cookies will log you out.
Changes & contact
We will update this policy if our cookie use changes. Questions: talk@mindfriend.com.