Cookie Policy

1. What Are Cookies

Cookies are small text files that are stored on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites work, to improve efficiency, and to provide information to the website operator.

Cookies can be “session” cookies, which are deleted when you close your browser, or “persistent” cookies, which remain on your device for a set period or until you delete them.

2. Cookies We Use

HypnoVox uses only strictly necessary cookies that are essential for the platform to function. We do not use any advertising, marketing, or cross-site tracking cookies, and we do not profile you. We do run error monitoring, which is described in section 4 — it sets no cookies, but it is technology that collects data about your use of the platform, so we would rather name it than leave it out.

The “*” in the cookie name represents the Supabase project reference, which is unique to each deployment.

3. No Third-Party Tracking Cookies

HypnoVox does not use any third-party tracking cookies. Specifically, we do not use:

• Google Analytics or any comparable audience analytics platform
• Facebook Pixel or any social media tracking
• Advertising or remarketing cookies
• Cross-site tracking of any kind
• Fingerprinting or similar identification technologies

Error monitoring. We use Sentry to record errors and a sample of performance traces so that faults can be diagnosed. Sentry sets no cookies. It receives error messages, stack traces, the page path, browser and device type, and your IP address. Share links, recording identifiers and email addresses are removed before anything is sent. This is used only to keep the platform working — never for advertising, profiling, or building a picture of you. Sentry is listed on our sub-processor register.

Your use of HypnoVox is not tracked for advertising or profiling purposes. The only cookies present are those strictly required to authenticate you and keep your session secure.

4. Cookie Consent

Under the Privacy and Electronic Communications Regulations 2003 (PECR) and the ePrivacy Directive, consent is not required for cookies that are strictly necessary for the provision of a service explicitly requested by the user.

Browser storage. Alongside cookies, HypnoVox stores a small amount of data in your browser’s local and session storage: whether you have dismissed the app install prompt, whether you have seen the welcome guide, and similar interface preferences. These are set only in response to your use of the platform, contain no personal data, and are cleared when you clear your browser data.

The exemption we rely on. HypnoVox relies on the strictly-necessary exemption in regulation 6(4) of PECR: storage that is essential to provide an information society service explicitly requested by the user. The service you have requested is a secure account through which therapy recordings are stored and shared. The cookies listed in section 2 exist solely to authenticate you, keep your session secure, and protect against cross-site request forgery. Without them the platform cannot identify you between one page and the next, so you could not log in, and recordings could not be kept private to the account they belong to.

We are not relying on any other basis, and we do not treat these cookies as exempt on the grounds that they are merely convenient or improve your experience. If any of them ceased to be essential to delivering the service you asked for, we would seek consent for it rather than continue under this exemption.

The same reasoning applies to the browser storage described above. Regulation 6 covers any storage of, or access to, information on your device — not only cookies — and those items are set in direct response to your use of the platform.

We therefore do not display a cookie consent banner. Disabling these cookies in your browser will prevent you from logging in and using the platform.

If we ever introduce non-essential cookies in the future (such as analytics), we will update this policy with at least 14 days' notice via email and implement appropriate consent mechanisms before deploying them.

5. How to Manage Cookies in Your Browser

Most web browsers allow you to control cookies through their settings. You can typically find these options in the “Privacy” or “Security” section of your browser preferences.

Please note that if you disable or delete HypnoVox’s authentication cookies, you will be signed out and will need to log in again. The platform cannot function without these essential cookies.

For instructions on managing cookies in common browsers:

• Chrome — Settings > Privacy and Security > Cookies and other site data
• Firefox — Settings > Privacy & Security > Cookies and Site Data
• Safari — Preferences > Privacy > Manage Website Data
• Edge — Settings > Cookies and site permissions > Manage and delete cookies and site data