Privacy & cookie policy
Last updated: 27 June 2026
States of Vitality is an organisational-assessment tool, operated by Mutomorro. This policy explains what information we collect when you use this website, why we collect it, and the choices you have. We have tried to keep it short and in plain language.
The information we collect
There are three kinds:
- Things you tell us. When you fill in a form on the site - for example to get in touch, to download a guide, or to take an assessment - we collect what you enter, such as your name, email address, organisation, and any message or survey answers you give us.
- Analytics. We measure how the site is used - which pages are visited, roughly what device and browser are used, and how people move through the site - so we can understand what is working and improve it. We do this with PostHog, a privacy-focused analytics tool hosted in the European Union (Frankfurt).
- Session recording. We use PostHog to record anonymised playback of how visitors move through the site, which helps us find and fix usability problems. We only do this for visitors who have accepted analytics cookies - if you decline, or before you choose, nothing is recorded.
Why we collect it, and our legal basis
- To respond to your enquiries and provide what you have asked for, such as a guide or an assessment. Our legal basis is taking steps at your request and our legitimate interest in running the service.
- To understand and improve the site through analytics and session recording. Our legal basis for these non-essential cookies is your consent - they only run if you accept.
Cookies and how consent works
A cookie is a small file a website stores on your device. We use two kinds:
- Essential cookies that the site needs to work - for example, one that remembers your cookie choice so we do not keep asking, and the sign-in cookies that keep you logged in to a dashboard. These do not need your consent.
- Analytics cookies used by PostHog to recognise returning visitors. Until you make a choice, our analytics run in a "cookieless" mode - they help us count visits but store no cookies on your device and do not recognise you from one visit to the next. If you accept, we enable full analytics cookies. If you decline, analytics are switched off.
Changing your mind
You can change your choice at any time using the Cookie settings link in the footer of any page, which reopens the cookie banner. You can also clear cookies through your browser settings.
Who we share it with
We do not sell your information. We use a small number of trusted providers to run the site, who process data on our behalf: Vercel (website hosting), Supabase (secure database), Resend (sending email), and PostHog (analytics). Each only handles what is needed to provide their part of the service.
How long we keep it
We keep personal information only for as long as we need it for the purposes above, and then delete it or anonymise it.
Your rights
You have the right to ask for a copy of the information we hold about you, to have it corrected or deleted, and to object to or withdraw consent for certain uses. To make a request, please contact us (below). You also have the right to complain to the UK Information Commissioner's Office (ICO).
Contact
For any questions about your data, or to exercise your rights, please contact us through our contact form.