Cookie Policy
Last updated: 23 March 2026
What are cookies?
Cookies are small text files that a website stores on your device when you visit. They allow the site to remember information about your visit — such as keeping you logged in — and help us understand how people use the platform so we can improve it.
Under UK PECR (Privacy and Electronic Communications Regulations) and UK GDPR, cookies that are not strictly necessary for the platform to function require your consent before they are set. You can change your preferences at any time.
Cookies we use
Strictly Necessary
These cookies are required for the platform to work. They cannot be disabled. No consent is required for these cookies under PECR.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| __session | Mosaic & Me (first-party) | Keeps you logged in. Stores a verified Firebase authentication token. HttpOnly — not accessible to JavaScript. | 7 days |
| admin_session | Mosaic & Me (first-party) | Admin dashboard authentication. Only set for platform administrators. HttpOnly. | 24 hours |
| mosaic_cookie_consent | Mosaic & Me (first-party) | Stores your cookie consent preferences (which categories you have accepted or rejected) and the timestamp of your last choice. | 365 days |
Analytics & Performance
These cookies help us understand how the platform is used so we can improve it. They are only set if you consent to analytics cookies.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Distinguishes users for page view analytics. Used to understand traffic patterns and popular content. | 2 years |
| _ga_* | Google Analytics 4 | Maintains session state for the GA4 property (G-CTKFMLW4RH). | 2 years |
| _gid | Google Analytics 4 | Distinguishes users within a 24-hour window. | 24 hours |
| Vercel Analytics | Vercel | Measures Core Web Vitals and page performance. Cookieless — does not set a cookie on your device. | No cookie set |
Functional
These cookies support session recording and heatmap tools that help us understand how people interact with pages. They are only set if you consent to functional cookies. Recordings never capture passwords or sensitive form content.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _hjid | Hotjar | Assigns a unique ID to identify a user across sessions. Used for session recording and heatmaps. | 1 year |
| _hjSession_* | Hotjar | Holds current session data to avoid unnecessary API calls during a session. | 30 minutes |
| _hjSessionUser_* | Hotjar | Set when a user first lands on a page. Persists the Hotjar user ID and session start time across pages in the same session. | 1 year |
| _cs_* | ContentSquare | Session recording and heatmap tool. Captures page interactions (clicks, scrolls, navigation) to help identify usability issues. No passwords or sensitive form fields are recorded. | Session / 13 months |
Marketing
We do not use marketing or advertising cookies. No retargeting pixels, advertising networks, or social media tracking scripts are loaded on this platform.
How to manage your preferences
You can change your cookie preferences at any time in two ways:
- Account settings: Go to Account → Cookies to view and update your current preferences.
- Browser settings: You can also delete or block cookies directly in your browser. Note that blocking all cookies will prevent you from staying logged in.
Manage cookies in your browser
Questions?
If you have questions about cookies or how we use your data, contact us at hello@mosaicandme.com. For more detail on how we handle personal data, see our Privacy Policy.