Cookie Notice

1. Overview

This notice describes cookies, local storage, pixels, and similar technologies used on irislightwithin.com and the limited-access Iris web app at irisapp.app. A cookie or browser-storage key can keep a session active, preserve a preference, protect a request, open checkout, or measure service performance.

The public WordPress website and the Iris web app use different technologies and controls. External sites such as unusualexperiences.app have their own notices.

2. Public website cookies

Cloudflare security

Cloudflare may set __cf_bm, a short-lived cookie used for bot detection and website security. It generally lasts about 30 minutes and is not used by Iris for behavioral advertising.

GoDaddy and WordPress infrastructure

WordPress-rendered pages may load GoDaddy Signals and performance tools that receive page-view, performance, click, impression, session, device, and network information. The public site may use:

• _tccl_visitor — recognizes a browser across visits; approximately one year.
• _tccl_visit — groups activity within a visit; approximately 30 minutes.
• _scc_session — supports session-level measurement; approximately 20 minutes.

The public WordPress site does not currently provide the same inline tracking-choice panel as the Iris web app.

3. Necessary web-app storage

The Iris web app uses browser storage that is necessary for service operation, including session and authentication state, guest-session continuity, locale and accessibility preferences, security and rate-limit signals, and the record of your tracking choices. Blocking or clearing this storage may sign you out, end a guest session, reset preferences, or prevent features from working.

4. Analytics choices

Iris may use first-party, allowlisted product events to understand basic feature performance. Those events are designed not to include private chat, journal, memory, names, contact details, or authentication tokens.

Google Analytics 4 may be used only after an analytics choice when that production feature is enabled. When Google Analytics 4 is enabled after consent, advertising storage, ad-user-data use, ad personalization, and Google Signals are disabled. Marketing storage is off by default. Global Privacy Control is used to keep marketing choices off where the deployed control supports it.

5. Checkout, security, and error monitoring

Cloudflare Turnstile may use browser and network signals to distinguish people from abusive automated traffic. Stripe may set cookies or similar technology when you open checkout or billing tools, including technology used for fraud prevention, payment security, and session continuity.

Error-monitoring providers may process limited diagnostic data to identify and fix technical issues. Do not include unnecessary personal information in error reports.

6. Embedded media and external links

A YouTube privacy-enhanced embed may connect to YouTube only after you choose to play it. YouTube or Google may then receive device and interaction information and use cookies or local storage under its policies. Social-media links are ordinary outbound links; Iris does not load social-network tracking software merely because a link appears.

When you open unusualexperiences.app or another external destination, its own cookies and privacy notice apply.

7. Your controls

Use the tracking controls in the Iris web app to manage optional analytics and marketing where available. Necessary storage remains active because it supports account or guest continuity, security, settings, consent records, and checkout. You can also block or clear storage in browser settings, although doing so may affect service operation.

Browser “Do Not Track” is not a uniform legal standard. Iris honors legally required opt-out preference signals when the Services engage in processing covered by those signals. See Privacy Choices.

8. Changes to this notice

We may update this notice when the website, web app, vendors, or controls change. We will post the revised version and provide additional notice or consent controls where required by law.

9. Contact