Cookie Policy
What we store on your device, why, and how to change your choice.
Last updated: 1 October 2026
Cookies are small files a website saves on your device. Similar technologies, such as the browser’s local storage, do the same job and are covered here too.
This page lists every cookie we use, what it is for and how long it lasts. It sits alongside our Privacy Policy.
Your choice
Analytics and advertising are off until you turn them on. The first time you visit we ask. Choosing “Reject all” is as easy as “Accept all”, and the site works the same either way. You can change your mind at any time with “Cookie settings” in the footer. If you turn something off, we delete its cookies and stop sending data straight away. We ask again after 12 months, or if what we use changes.
Always on: necessary
The site cannot work without these, so they do not need your consent.
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| next-auth.session-token | Us | Keeps you signed in (with Google or by email). | Up to 30 days |
| next-auth.csrf-token, next-auth.callback-url | Us | Protect the sign-in step from forgery. | Browser session |
| auth-token | Us | Keeps you signed in. Not readable by scripts. | 7 days |
| user | Us | Remembers your name, email and role so the menu can show who you are. It is not used to decide what you may do. | 7 days |
| mm_consent | Us | Remembers your cookie choice and when you made it. | 12 months |
| Cloudflare Turnstile | Cloudflare | Checks a form is filled in by a person, not a bot. | Browser session |
Analytics: only if you agree
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| _ga, _ga_<id> | Google Analytics | Counts visitors and pages and shows how people found us. | Up to 2 years |
If you also complete a booking, our server tells Google about the purchase (an order reference and amount) so the sale is counted even if you close your browser during payment. We only do this if you agreed to analytics.
Advertising: only if you agree
| Name | Set by | What it does | Lasts |
|---|---|---|---|
| _fbp | Meta Pixel | Identifies your browser so Meta can measure our adverts. | Up to 90 days |
| _fbc | Meta Pixel | Records that you arrived from a Meta advert. Only set if you did. | Up to 90 days |
If you also complete a booking, our server tells Meta about the purchase, including an encoded (hashed) form of your email, phone number and name, your IP address, browser details and the two cookie values above. We only do this if you agreed to advertising. Meta uses this under its own privacy policy.
Local storage
We also save a few things in your browser’s local storage: your sign-in state so the menu loads quickly, a half-finished host application so you do not lose it (it is cleared when you submit, and never includes the terms tick), and small display preferences. None of these are sent to advertisers.
Other ways to control this
- Your browser lets you block or delete cookies. Blocking the necessary ones will stop sign-in working.
- Google’s Analytics opt-out add-on and your ad preferences in Facebook and Instagram.
Questions
Email mindsetmingle@gmail.com. We will update this page, and ask you again, when what we use changes.
Questions about this policy? Email mindsetmingle@gmail.com. Business details and complaints.