Cookie Policy

Cookie and Tracking Policy

Effective Date: June 3, 2026

Entity: PsyData Labs L.L.C. ("PDL", "we", "us", or "our")

1. Introduction

PsyData Labs L.L.C. respects your privacy and is committed to being transparent about the technologies we use. This Cookie and Tracking Policy explains how we use cookies, web beacons, pixels, and similar tracking technologies when you visit our websites or use our APIs, research enclaves, and services.

Because we process Behavioral Data (D-BEH) and Psychological Signals (D-PSY) for analytics, research, and product features, we have adopted strict GDPR and CPRA-aligned default settings for all users, regardless of geographic location.

2. Our Privacy-First Approach (GDPR & CPRA Defaults)

We treat your privacy as a fundamental right. By default, PDL operates under strict data protection principles:

• Strict Opt-In for Non-Essential Cookies: We do not deploy any non-essential cookies (including analytics, marketing, or behavioral trackers) unless you provide affirmative, explicit consent.
• "Do Not Sell/Share" Default: We do not sell or share your personal information, Behavioral Data, or Psychological Signals for cross-context behavioral advertising by default.
• No Automated Profiling Without Consent: We do not use cookies to build High-Risk Psychological Profiles (H-RP) without your explicit permission and a mandatory Human-in-the-Loop (HITL) review.

3. What Are Cookies and Tracking Technologies?

Cookies are small text files stored on your device that uniquely identify your browser or device. We use them alongside similar technologies (like local storage and session variables) to ensure the security, reliability, and functionality of our platform.

4. Types of Cookies We Use

We categorize our cookies based on their purpose and strictly enforce retention limits:

• Essential (Strictly Necessary) Cookies: These are required for basic site functionality, such as maintaining secure sessions, recording privacy preferences, and facilitating load balancing. These cannot be disabled in our systems.
  Lifespan: Session to 1 year.
• Analytics & Performance Cookies (Opt-In): If you consent, we use these to collect Behavioral Data—such as interaction sessions, navigation paths, and device context—to understand and improve our platform.
  Lifespan Constraint: We impose a strict maximum 13-month retention limit for all analytics and telemetry cookies.
• Functional & Research Cookies (Opt-In): These allow our platform to remember your preferences and facilitate participation in research workflows (e.g., preserving state during a psychological survey).
  Lifespan: Session to 12 months.
• Marketing & Advertising Cookies (Opt-In): Used rarely and only to deliver relevant PDL updates. We do not allow third parties to scrape your data for their own independent marketing.
  Lifespan: Maximum 6 months.

5. Global Privacy Control (GPC) Support

PDL fully respects and supports the Global Privacy Control (GPC) signal. If you have enabled GPC in your browser or through an extension, our systems will automatically detect it. Upon detecting a GPC signal, we will:

• Immediately treat it as a valid "Do Not Sell or Share My Personal Information" request under CPRA.
• Automatically opt you out of all non-essential analytics and tracking cookies.
• Persist this preference across your browsing session.

6. Managing Your Cookie Preferences

You remain in full control of your data. You can adjust your cookie settings at any time through the following methods:

• Privacy Preference Center: Click the "Manage Cookies" or "Cookie Settings" link in our website footer to update your opt-in/opt-out status for each category.
• Browser Controls: You can configure your browser settings to reject cookies or prompt you before accepting them. Note that blocking Essential Cookies may impact the functionality of our services.
• Global Privacy Control: Enable GPC in your supported browser to automatically broadcast your privacy preferences.

7. Third-Party Processors

In limited cases, we utilize vetted third-party subprocessors to assist with platform analytics and security. All third parties must comply with our stringent vendor diligence standards, adhere to Data Processing Agreements (DPAs) incorporating GDPR Article 28 clauses, and respect our 13-month data retention limits for analytics. Third parties are strictly prohibited from using PDL data for their own purposes.

8. Updates to this Policy

We review this Cookie and Tracking Policy annually or whenever material changes to our data practices occur. If we make significant changes to how we process Behavioral Data or Psychological Signals via cookies, we will notify you and request renewed consent.

9. Contact Information

If you have any questions or concerns about our use of cookies or your data privacy rights, please contact our Data Protection Lead:

• Email: privacy@psydatalabs.com
• Mail: Data Protection Lead, PsyData Labs L.L.C., New York

For more comprehensive information about how we handle personal data, including how to submit a Data Subject Access Request (DSAR), please review our general Privacy Policy.