Cookies Policy

Legal · Clear storage choices

Cookies & Similar Technologies Policy

This Policy explains what CatMind AI stores in your browser, why it is needed, how long it remains and how you can control it.

Effective 25 August 2026 Operator Latysocles Studio Current mode Essential storage plus cookieless audience measurement
01

Who we are and what this Policy covers

This Cookies & Similar Technologies Policy (the “Cookie Policy”) explains how CatMind AI (“CatMind AI”, “we”, “us” or “our”) uses cookies, local storage and related technologies when you visit or use the CatMind AI website, account, dashboards and analysis services (together, the “Platform”).

Controller / Operator: Latysocles Studio (The Netherlands) Zegenstraat 42, 3082 XV Rotterdam, The Netherlands Chamber of Commerce (KvK): 42070626 support@catmind.ai

This Cookie Policy should be read with our Privacy Policy and Terms of Service. Acknowledging this Policy is not the same as consenting to optional technologies.

02

Current implementation

CatMind AI uses cookieless audience measurement

CatMind AI uses a restricted set of privacy-conscious product analytics through PostHog Cloud EU. PostHog is configured in permanent cookieless mode and does not store an analytics identifier, consent choice or analytics state in cookies, local storage or session storage on your device.

CatMind AI does not identify users in PostHog. Unique visitors are estimated using a short-lived, privacy-preserving server hash that changes daily. The source IP address is stripped before the event is stored. CatMind AI does not deploy advertising cookies, remarketing pixels or social-media tracking pixels.

Session replay, surveys, heatmaps, automatic click capture and automatic error or performance capture remain disabled. Only allowlisted page visits and product-funnel events are sent.

03

What cookies and similar technologies are

Cookies are small text files stored by a website in your browser. A first-party cookie is set by the website you visit; a third-party cookie is set by another provider whose service is included on that website. Session cookies normally disappear when the browser closes, while persistent cookies remain until their expiry or deletion.

Local storage lets a website save small pieces of information in the browser without automatically sending them with every network request. Session storage is similar but is normally limited to the current browser tab or session.

Pixels, tags, device identifiers and JavaScript SDKs can also read or write information or report interactions. In this Policy, “cookies” may refer collectively to cookies and similar technologies unless a distinction is necessary.

04

Categories and purposes

Active

Strictly necessary

Authentication, account access, security, request integrity, service delivery and other functions required for a service you request.

Consent generally not required
On request

Preferences

Remember choices you actively make, such as selecting light or dark mode.

Used only after your choice
Active — cookieless

Audience measurement

Measures allowlisted page visits and product-funnel events without writing an analytics identifier or state to browser storage.

Privacy-preserving configuration
Not deployed

Marketing

Would measure campaigns, enable remarketing or connect visits with advertising platforms.

Prior consent where required
05

Current first-party browser storage

The following entries are used by the current CatMind AI Frontend. They are local-storage entries, not traditional HTTP cookies.

Name Category Purpose Typical duration Control
catmind-theme Preference Remembers the light or dark theme selected by the user. Until changed or browser storage is cleared. Theme control or browser settings.
access_token Strictly necessary Authenticates requests after login and enables access to the user's account. The token is configured to expire after approximately 60 minutes; the stored entry is removed on logout, invalidation or clearing browser storage. Log out or clear site data. Blocking it prevents signed-in use.
token_type Strictly necessary Stores the authentication scheme associated with the access token. Until logout, invalidation or clearing browser storage. Log out or clear site data. Blocking it may prevent signed-in use.
catmind_referral_attribution_v1 User-requested referral attribution Remembers the referral code used to open registration so it can be submitted with the new account. Up to 30 days, or removed after completed registration. Clear site data. Removing it before registration removes referral attribution.
catmind_referral_device_v1 Fraud prevention Provides a random first-party browser identifier. The referral service stores only a one-way pseudonymous hash and uses matches as human-review signals, never as an automatic rejection. Until browser storage is cleared. Clear site data. A new random value may be created if referral registration is used again.

The web server or future production infrastructure may use short-lived, strictly necessary technologies for security, load balancing, fraud prevention or request routing. If a material technology is introduced, this table or the available consent interface will be updated.

07

Third-party technologies and embedded content

CatMind AI loads PostHog Cloud EU from eu-assets.i.posthog.com and sends allowlisted cookieless events to eu.i.posthog.com. PostHog states that EU Cloud data is hosted in Frankfurt, Germany. CatMind does not identify users in PostHog and does not send videos, audio, pet data, analysis contents or results, form text, names, email addresses or payment details.

If CatMind AI later embeds video players, payment tools, support widgets, maps, social content or other third-party services that access device information, we will identify relevant providers, purposes, categories and controls. Where required, such content will remain blocked until you consent or actively request the feature.

Data collected through a permitted third-party technology may be processed outside the EEA. Relevant international-transfer safeguards are described in the Privacy Policy.

08

How to control or delete browser storage

Use CatMind AI controlsUse the theme button to change your saved theme and Log out to remove stored authentication entries.
Use browser settingsMost browsers let you inspect, block or delete cookies and site data for one website or for all websites.
Private browsingPrivate or incognito windows normally remove local site data when the private session closes, subject to browser behaviour.

Deleting access_token or token_type will sign you out. Blocking necessary storage may prevent login and other account functions. Deleting catmind-theme returns the interface to its default theme. Cookieless PostHog analytics does not add an entry that can be deleted from browser storage.

09

Browser privacy signals

CatMind AI does not deploy behavioural advertising or cross-context tracking. PostHog runs in permanent cookieless mode, does not create persistent person profiles and respects the browser’s “Do Not Track” preference.

If applicable law requires recognition of a browser-based opt-out signal for processing introduced in the future, we will implement and describe the relevant response.

10

Storage duration and updates

The exact duration for each current entry appears in the storage table. Persistent local storage can remain after the browser closes and has no automatic expiry unless the application or browser removes it. Authentication tokens become unusable after their server-defined expiry even if an expired string remains in browser storage.

We review this Policy when the Platform's storage technologies change. We may update names, providers, durations and purposes to reflect technical or legal developments. Material changes will be highlighted or otherwise notified where required, and the effective date will be updated.

11

Contact

For questions about cookies, local storage or cookieless analytics, contact:

Latysocles Studio — CatMind AI Privacy support@catmind.ai Zegenstraat 42, 3082 XV Rotterdam, The Netherlands Chamber of Commerce (KvK): 42070626

You may also contact the Dutch supervisory authority, the Autoriteit Persoonsgegevens, or another competent supervisory authority.