Cookies policy

Last Updated: 25 October 2026

More Human Ltd. (“we”, “us”, “our”) uses cookies and similar technologies on our website and services. This Cookies Policy explains what cookies are, how we use them, and your choices.

1. What are cookies?

Cookies are small text files stored on your device when you visit a website. They help websites work properly and provide useful information to the site owners.

2. How we use cookies

• Make our website and services work as expected
• Remember your preferences (like log-in status)
• Improve our services by understanding how people use them
• Keep our site secure

We do not use cookies to collect sensitive personal data, and we do not sell cookie information to third parties.

3. Types of cookies we use

• Essential cookies: required for the site to function (e.g., log-in, navigation).
• Performance cookies: help us understand how our site is used so we can improve it.
• Preference cookies: remember your settings and choices.
• Statistics cookies: set by Google Analytics, and only if you accept statistics cookies in our banner. They hold a random ID for your browser (the _ga cookies), so Google Analytics can count visits and pages over time. They do not hold your name or email address. Google Analytics keeps this data for at most 14 months. If you accept statistics cookies, Uma's screenings also record which question you have reached and when (never your answers); see our Privacy Policy, Section 3.1.
• Marketing cookies: set only if you accept marketing cookies in our banner. Videos, podcasts and posts from YouTube, Vimeo, Spotify, Apple Podcasts, SoundCloud, TikTok, Instagram, Facebook and X load only after you accept them. Those companies may then set their own cookies and see your IP address, under their own privacy policies.
• Consent cookie: set by Cookiebot, which runs our cookie banner, to remember the choice you made in it so we do not ask you on every page.
• uma_guest_hearts (necessary, 30 days). If you favourite something before signing in, this cookie remembers which items you favourited. It holds only the item reference numbers, nothing about you. When you sign up or log in, your favourites move to your account and the cookie is deleted.

4. Your choices

When you first visit, our cookie banner asks which optional cookies you accept. Until you choose, only essential cookies are used. To change your choice, clear the cookies for our website in your browser and the banner will ask you again.

Change my cookie choice

You can also control or delete cookies in your browser settings. Please note that blocking essential cookies may affect how our website works.

5. Session tokens and authentication cookies

5.1 What are session tokens?

When you sign in, Firebase Authentication (Google) keeps your sign-in in your browser's session storage, for that tab only. It is not a cookie. It ends when you close the tab, when you sign out, or after 30 minutes without activity (we ask "Are you still there?" 2 minutes before).

5.2 Pre-authentication tokens (not cookies)

When you begin the login or reset-PIN flow, we also issue a temporary pre_auth_token. This is NOT a cookie; it is a server-side token that:

• Is valid for 10 minutes
• Cannot be accessed from your browser
• Prevents brute-force attacks on your 4-digit PIN
• Is invalidated after successful authentication or 5 failed attempts

You will never see this token in your browser storage.

5.3 Local storage (not cookies)

In addition to cookies, Uma uses your browser's localStorage to store preference data on your device:

• Calm mode and other display settings
• Your choices of podcast player, bookseller and app store
• When you were last active (for the 30-minute sign-out)

You can clear this data at any time by clearing your browser's local storage (typically Settings > Privacy > Clear browsing data > Cookies and site data). Clearing localStorage will not affect your ability to log in.

localStorage persists until you delete it, even if you close your browser. It is not encrypted on your device, so someone with physical access could view it.

5.4 Compliance notes

Under UK GDPR and ePrivacy Regulations, session tokens are exempt from the requirement to obtain prior consent because they are strictly necessary for the service to function (authentication). We do not require you to opt-in to session tokens. They are applied automatically.

Analytics and performance cookies (Section 3) require your consent. You can opt out of these in our cookie banner or your browser settings.

Email leanne@wearemorehuman.co.uk if you have questions about which cookies are in use.

6. Third-party services and links

• Feedback button: our own, not a third party's. If you choose to send us feedback, we receive what you write, a screenshot of the page if you add one, and technical details such as your browser and screen size, so we can find and fix the problem.
• Affiliate links: some links to books and products in the Uma library and self-care marketplace are affiliate links, including links to Amazon and Bookshop.org. When you follow one, the retailer may set its own cookies on its website to record that you came from Uma. Their cookie policies apply there. As an Amazon Associate, More Human Ltd earns from qualifying purchases.

7. Contact us

If you have questions about this Cookies Policy, please contact:
leanne@wearemorehuman.co.uk