Cookie Policy
Last updated: 9 September 2026
This policy explains how Emotional Pulse, operated by ShareTree Inc., uses cookies and similar technologies, what each cookie is for, and how you can control them.
1. Where this policy applies
It covers both places you can meet Emotional Pulse:
- The website at emotionalpulse.ai, which anyone can browse without an account.
- The app at app.emotionalpulse.ai, which you sign in to. The app is built with WeWeb and Xano and integrates payment (Stripe) and sign-in (Microsoft Entra ID, formerly Azure AD) services that set their own cookies.
Some app cookies are set for the whole emotionalpulse.ai domain, so if you have signed in to the app they may still be present in your browser while you read the website.
2. What cookies are
Cookies are small text files stored by your browser when you visit a site. They make core things work, like keeping you signed in and keeping a session secure, and they can also be used to measure how a site is used or to attribute a visit to an advertisement.
3. Cookies on the website
The website loads a Google Tag Manager container, which in turn loads Google Analytics 4. These cookies are not essential to browsing the site: they exist so we can understand which pages and resources are useful.
| Cookie | Set by | What it does | Category |
|---|---|---|---|
_ga | Google Analytics | Distinguishes one browser from another so visits can be counted without identifying you by name. | Analytics |
_ga_<property id> | Google Analytics | Keeps session state for the specific Analytics property used by this site. | Analytics |
_gcl_au | The Google Ads conversion linker. Attributes a visit to an advertisement or campaign click. | Advertising |
We do not use cookies on the website to build advertising profiles about you, and we do not sell what they collect. Google’s own description of these cookies is at policies.google.com/technologies/cookies.
4. Cookies in the app
Signing in to the app sets more cookies, most of which are genuinely essential.
| Cookie or group | Set by | What it does | Category |
|---|---|---|---|
| Session token (JWT) | WeWeb and Xano | Keeps you signed in across the front end and the backend. Name, expiry and security flags are managed by those platforms. | Strictly necessary |
__stripe_sid | Stripe | Short-lived session cookie used to detect suspicious activity during payment. | Strictly necessary |
__stripe_mid | Stripe | Longer-lived cookie identifying a repeat device, for fraud prevention. | Strictly necessary |
ESTSAUTH | Microsoft Entra ID | Transient single sign-on session cookie. | Strictly necessary |
ESTSAUTHPERSISTENT | Microsoft Entra ID | Longer-lived sign-in cookie, used when you choose to stay signed in. | Strictly necessary |
ESTSAUTHLIGHT, SignInStateCookie, CCState, buid, fpc, esctx, ch and related | Microsoft Entra ID | Session state, anti-forgery protection and sign-in telemetry. | Strictly necessary |
AMP_<id> | Amplitude | Product analytics. Records how features in the app are used, so we can improve them. | Analytics |
AMP_MKTG_<id>, EXP_<id>_identity | Amplitude | Records how you arrived at the app, and keeps a consistent identifier for analytics. | Analytics and attribution |
intercom-id-<id>, intercom-session-<id>, intercom-device-id-<id> | Intercom | Runs the in-app support messenger and keeps a support conversation attached to you between visits. | Support |
5. Which cookies need your consent
The authentication, payment and sign-in cookies above are strictly necessary: the app cannot sign you in or take a payment without them, so they are set whenever you use it. The analytics, attribution, advertising and support cookies are not strictly necessary, and you can refuse or remove them using the controls in the next section without losing access to your account.
6. Your choices
- Browser settings. Every major browser lets you block or delete cookies, either generally or per site. Blocking cookies for app.emotionalpulse.ai will stop you signing in.
- Google Analytics. Google publishes a browser add-on that opts you out of Analytics on every site at tools.google.com/dlpage/gaoptout.
- Tracking protection. Most browsers now block third-party analytics and advertising cookies by default or offer a setting that does. Emotional Pulse works normally with those protections on.
- Ask us. Email support@sharetree.org with any question about what we set or why.
7. How long cookies last
Session cookies, such as the Entra ID sign-in session, last only until you close your browser. Persistent cookies, such as the Stripe device cookie and the Google Analytics cookies, stay until they expire or you delete them; each provider sets its own expiry and can change it, so we do not publish fixed durations here. All cookies are delivered over HTTPS.
8. Changes to this policy
We may update this policy as the services we use change. If we make a substantial change we will say so by email or in the app. This version replaces the earlier cookie policy that was published inside the app and covered the app alone.
9. Contact
Questions go to support@sharetree.org.
ShareTree Inc., Australia
See also our Privacy Policy and Terms of Use. If you receive Proactive EAP check-in calls, the Proactive EAP Employee Privacy Notice explains what those calls collect.