Effective September 25, 2026 · Version 2026-09-25.2
This notice supplements Privacy.
Necessary storage
The portal uses browser storage and authentication mechanisms to keep a sign-in session, protect access and remember choices. The app uses device storage for settings, unfinished setup and optional chat history. Clearing browser data, using private browsing, or signing out can remove a saved login. Essential authentication storage is not an advertising cookie. You can control it in your browser or device, although restricted pages may stop working.
Website analytics and network requests
Marketing pages use limited Vercel website analytics to understand page visits, referral sources and broad device or location information. Cookie-free measurement can still involve technical information; we do not describe it as collecting nothing. Patient pages and the clinician portal do not include those marketing analytics scripts. Hosting, fonts and script delivery can generate request logs containing network addresses, timestamps and browser information. See Service Providers.
We do not run advertising pixels, cross-site behavioral advertising or session replay on patient-facing pages. Do not put patient information into website addresses or public form fields. We do not currently run Firebase Analytics in the phone app. If new analytics or optional tracking is introduced, the applicable notice, permission and safeguards must be in place first.
The public self-assessment keeps completed answers and its score in page memory. A first answer carried from the home page uses temporary session storage and is cleared on completion. Email entry is saved separately on our server with the collection and marketing choices. The form does not send answers or scores to an email provider. Reloading the assessment clears its results.
Choices
Use browser privacy settings and available opt-out signals. We honor legally applicable Global Privacy Control and other recognized preferences for covered processing. Those signals do not automatically delete an account or end a share you requested. Contact admin@lessen.app for privacy questions, rights or objections. We will obtain prior consent where law requires it for a new optional storage or tracking purpose.
Website signup reminders
If you complete the website assessment without requesting marketing updates, this browser may remember a signup-invitation preference for up to 90 days. This preference can indicate that you used the assessment, but contains no email, answers or score and is not sent to EmailOctopus. A card appears after results; eligible returning visits may show up to two additional invitations, at least seven days apart. A visit is treated as new after 30 minutes without a page visit. Reminders do not appear in the clinician portal, shared patient pages, policies or support. Choose “Don’t ask again on this browser” to stop invitations, or clear browser storage to remove this preference. Requesting updates stops further invitations in that browser. Other devices and browsers do not share the preference. Declining an invitation does not prevent viewing results.
Internal product and channel measurement
We use first-party measurement to understand whether Lessen is useful and which outreach brings people to it. Registered campaign links may contain a non-personal referral code. Marketing pages send that code and coarse events, such as a visit, assessment start/completion or app-store link click, to our own server. They do not send assessment answers, scores or email addresses in these measurement requests. Browser session storage remembers the code and limits repeat counts within the tab session. This measurement stops when Global Privacy Control or Do Not Track is enabled. A daily rotating, secret-derived network-address hash limits automated requests; hosting providers may separately hold ordinary security logs. Aggregate website counts are deleted after one year.
In the signed-in phone app, we record limited activity days and setup milestones, including viewing the trial screen, connection screen and data reveal, and completing setup. A milestone is not proof of a purchase, successful treatment or abstinence. You may voluntarily enter a referral code and answer short questions about what helped or why you plan to leave. A saved code links your account to that campaign for internal reporting. It does not grant a provider access to your patient information and is not sent to advertising platforms. You can remove the saved referral link in Settings. Feedback remains until you replace it, request deletion or delete your account. Daily app activity is deleted after one year. Account deletion removes linked attribution, activity, feedback and this internal receipt ledger. Separate legally required billing records are governed by our retention schedule.
Verified store notifications, when connected, provide purchase, trial, environment and coverage information for internal measurement. Sandbox receipts and free trials are separated from real purchase receipts. Only authorized Lessen administrators can view the internal aggregate report. Provider relationship notes contain practice-level counts, costs and next actions, not patient names or clinical notes. No new external research release, advertising audience or clinician access is authorized by this measurement.
Optional Google Ads measurement on public pages
If you allow cookies in our cookie pop-up, public marketing and policy pages load Google Ads tag AW-18466932609. Google may receive basic visit and device/network information and use advertising measurement cookies. Ad personalization is disabled. We do not configure enhanced conversions, send email addresses, or build remarketing audiences from health information. The tag is not loaded on the full self-assessment page, account setup, clinician portal, private shared pages or internal reports. The homepage shows the first assessment question; an answer given there stays in your browser and is never sent to Google. Assessment answers, risk scores, patient records and account identifiers are not included in our tag configuration.
Until you allow cookies, this Google tag does not load. You can choose No thanks without losing access to the site. Use Cookie choices at the bottom of a public page to change your choice. We remember the choice on that browser for up to 180 days. Declining after allowing removes the Google measurement cookies this site can access and reloads the page without this tag; it does not recall information already sent. We honor Global Privacy Control and Do Not Track by keeping the tag off. Email-list permission is a separate choice. See Google's privacy information and Service Providers.