Skip to main content
Mosaic Biodata

Cookie Policy

Effective:
January 1, 2026
Last updated:
January 1, 2026

This Cookie Policy explains how Mosaic Biodata Inc. ("we," "us," or "our") uses cookies and similar tracking technologies on our website (https://mosaicbio.io), mobile applications, and related services (collectively, the "Services"). This policy supplements our Privacy Policy and Terms of Service.

We comply with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Texas Data Privacy and Security Act (TDPSA).

Types of Cookies We Use

Essential Cookies (Cannot be disabled)

Required for the Services to function properly.

What They Do:

  • Maintain secure login sessions.
  • Process orders for genetic testing kits
  • Remember language and accessibility preferences.
  • Prevent fraud and maintain security.

Retention: Session to 12 months

Legal Basis: Necessary for contract performance and legitimate security interests

Functional & Preference Cookies

First-party only — these are not advertising cookies and are never sold or used to target ads. The attribution cookie records how you first reached us, including any ad click identifier; we may use that click identifier to measure advertising effectiveness (see the Advertising / Marketing section), never to build audiences or target you.

  • Remember your cookie-consent choice so we don’t ask again.
  • A first-party attribution cookie that records how you first reached us (for example, a campaign link or referring site) so we can credit the right channel. It is not a third-party tracker.

Retention: Up to 180 days

Legal Basis: Legitimate interests in first-party measurement

Analytics Cookies (First-party — on by default in the US, opt-in in the EU/UK)

We use Google Analytics 4 (a first-party measurement tool) to understand how the site is used. Your region sets the default under Google Consent Mode v2: in the EU, UK, and Switzerland, analytics storage is off by default and turns on only if you select “Accept” in our banner (opt-in); in the United States and other regions, analytics is on by default and you can opt out at any time via “Your Privacy Choices” in the footer (opt-out). We honor the Global Privacy Control (GPC) browser signal as an opt-out. We place no advertising cookies. What they collect:

  • Pages visited and time spent.
  • General location (city/region level)
  • Device and browser type
  • Traffic sources

Retention: Up to 24 months

Legal Basis: Your consent (EU, UK, and Switzerland) or our legitimate interest in first-party measurement (United States and other regions)

Advertising / Marketing Cookies (Not used)

We do not use advertising or marketing cookies, and we place no third-party advertising or social-media tracking pixels on our website. We do not sell your personal information, and we do not build advertising audiences, run retargeting, or engage in cross-context behavioral advertising. We do share limited, non-sensitive conversion data (a click identifier and the purchase value — never genetic, health, product, or browsing detail) with Google and Meta to measure advertising effectiveness; under California law this counts as a “share.” You can opt out at any time via the “Your Privacy Choices” link in our footer (which is also our “Do Not Sell or Share” control) or by sending a Global Privacy Control (GPC) signal.

Cookies and identifiers we set

  • mb_consent — your analytics choice (granted or denied). Up to 180 days.
  • mb_geo — your coarse region (EU/UK/Switzerland vs. other) so we can apply the correct default. Up to 180 days.
  • mb_dns — set when you opt out of advertising-measurement sharing via “Your Privacy Choices” (or via GPC). Up to 180 days.
  • mb_attr — first-touch marketing attribution (for example, the campaign that referred you). First-party; never shared with advertisers. Up to 180 days.
  • Google Analytics _ga / _gid — set only after analytics is on, to measure site usage. Up to 24 months.

Your Rights and Choices

You have the right to:

  • Choose which non-essential cookies to accept.
  • Withdraw consent at any time.
  • Access and delete cookie data (subject to essential cookie limitations)
  • Decline analytics cookies at any time.

For EU/UK Residents:

  • Right to lodge complaints with your data protection authority.
  • Right to detailed information about cookie processing

For California Residents:

  • Right to know what cookie data is collected.
  • Right to delete personal information collected through cookies.
  • Right to opt out of the sale or sharing of cookie data.
  • Right to non-discrimination

For Texas Residents:

  • Right to access and delete personal data collected through cookies
  • Right to opt out of targeted advertising

Managing Your Cookie Preferences

Cookie Banner

In the EU, UK, and Switzerland, an opt-in banner appears on your first visit so you can Accept or Decline analytics cookies. In the United States and other regions, analytics is on by default and no banner appears — you can opt out at any time (see “Changing Preferences” below). Essential and functional cookies are always on, and we use no advertising cookies.

Changing Preferences

Use the “Your Privacy Choices” link in the footer of any page to change your analytics choice at any time. Declining there also opts you out of advertising-measurement sharing, so it doubles as our “Do Not Sell or Share My Personal Information” control. We also honor the Global Privacy Control (GPC) browser signal as an opt-out of both.

Browser Settings

You can control cookies through your browser's privacy or security settings:

  • Chrome: Settings → Privacy and security → Cookies and other site data
  • Firefox: Settings → Privacy & Security → Cookies and Site Data
  • Safari: Preferences → Privacy → Cookies and website data
  • Edge: Settings → Cookies and site permissions → Cookies and site data

Important: Blocking essential cookies will prevent core functionality, such as login and order processing.

Do Not Track Signals (and Global Privacy Control)

We do not respond to legacy “Do Not Track” browser signals due to a lack of industry standardization. We do, however, honor the Global Privacy Control (GPC) signal as an opt-out of analytics and advertising-measurement sharing. You can also control your choices through “Your Privacy Choices” in our footer or your browser settings.

Services for Minors

For users under 18 with parental consent:

  • Only essential cookies are used.
  • No marketing cookies are enabled.
  • Parents/guardians can manage all cookie settings.

International Users

We operate globally and comply with privacy laws in jurisdictions where we offer Services, including GDPR (EU/UK), CCPA/CPRA (California), TDPSA (Texas), and PIPEDA (Canada).

For EU/UK users, data transfers outside the EU/UK are protected by appropriate safeguards, including Standard Contractual Clauses.

Updates to This Policy

We reserve the right to update this Cookie Policy to reflect changes in technology, legal requirements, or our Services.

For Material Changes (new cookie categories, retention period changes, or modifications to your rights):

  • 30-day notice via email to registered users
  • Prominent website banner
  • Re-consent request for new cookie types

For Minor Changes: Updated policy posted with new "Last Updated" date

Contact Us

Email: support@mosaicbio.io

Data Protection Officer (GDPR inquiries): support@mosaicbio.io

Mailing Address:

Mosaic Biodata Inc. 919 Congress Ave, Suite 525 Austin, TX 78701 USA

Business Information:

Registered in Delaware, Principal Place of Business in Texas

Response Time: We respond to cookie-related inquiries within five business days, or within legally required timeframes for formal rights requests.