Cookie Policy

1. Introduction

This Cookie Policy explains how Wellthrive Inc. ("Wellthrive," "we," "us," or "our") uses cookies and similar technologies on this website. It should be read together with our Privacy Policy, which describes how we handle personal information more broadly. By using this website you agree to the use of strictly necessary cookies described below; where consent is required for any other technology, we ask for it first.

2. What cookies and similar technologies are

Cookies are small text files placed on your device when you visit a website. "Similar technologies" include local storage and comparable mechanisms that store or read information on your device. They are widely used to make websites function, to remember preferences, and, on many sites, to measure usage or deliver advertising. This policy covers both.

3. How we use cookies: a privacy-first approach

We take a deliberately minimal approach. We use only what is needed to operate this website and to process the requests you choose to send us. We do not use cookies to build advertising profiles or to track you across other websites. The categories we use are:

• Strictly necessary. Required for the website to load and function securely. Any such cookies set by our hosting provider are used only for core operation and security, and cannot be switched off through our site.
• Functional / preferences. Remember basic choices so the site behaves as you expect during your visit. Limited in scope and not used for tracking.
• Privacy-friendly analytics (cookieless). We use Vercel Web Analytics and Vercel Speed Insights, together with Google Analytics in a cookieless, consent-denied configuration (Google Consent Mode with analytics_storage set to "denied"), to understand aggregate traffic and site performance. In this configuration these tools do not set analytics cookies such as _ga or _gid on your device, do not identify you individually, do not track you across other sites, and are not used for advertising.
• Local storage for form processing. When you submit the waitlist or contact form, our backend service provider (Supabase) may use local storage on your device to operate the submission securely. This delivers the function you requested; it is not used for advertising.

We do not use third-party advertising or marketing cookies, cross-site or cross-context behavioral tracking, or analytics that profile individuals. We use Google Analytics only in the cookieless, consent-denied configuration described above, and we do not enable its advertising, cross-site, or individual-profiling features (and we do not use PostHog or a Meta Pixel). We do not use cookies, local storage, SDKs, pixels, or analytics technologies to target advertising based on health, wellness, lab, supplement, genetic, or other sensitive information.

The technologies we use, at a glance:

• Strictly necessary hosting / security (Vercel). Purpose: load, secure, and serve the site. Personalization or advertising: no advertising; no cross-site behavioral tracking. Retention / control: session or provider-controlled operational duration; blocking may impair site operation.
• Vercel Web Analytics. Purpose: aggregate page and traffic measurement without third-party cookies. Personalization or advertising: no advertising; no individual profiling; no cross-site tracking. Retention / control: cookieless; aggregate session data controlled by Vercel.
• Vercel Speed Insights. Purpose: aggregate performance and Core Web Vitals measurement. Personalization or advertising: no advertising; no individual profiling; no cross-site tracking. Retention / control: cookieless; anonymous performance data controlled by Vercel.
• Google Analytics (cookieless / Consent Mode). Purpose: aggregate traffic and engagement measurement (sessions, pages, country/region, device, referral source). Personalization or advertising: no advertising; no individual profiling; no cross-site tracking; Google Signals and ads personalization are disabled. Retention / control: cookieless under Google Consent Mode (analytics_storage set to "denied"); no _ga or _gid cookies are set on your device; processed under a data processing agreement with Google, which may not use the data for its own advertising.
• Supabase form-processing local storage. Purpose: operate waitlist / contact submissions you choose to send. Personalization or advertising: no advertising; no cross-site behavioral tracking. Retention / control: local storage remains until you clear it; submitted server-side data is handled under the Privacy Policy.

4. Third-party service providers

We rely on a small number of providers to run the website. They act as data processors on our behalf and are not permitted to use your information for their own advertising:

• Supabase processes the waitlist and contact-form submissions you send us.
• Vercel hosts and serves the website and provides the cookieless, aggregate analytics and performance measurement described above.
• Google (Google Analytics) provides the cookieless, aggregate traffic and engagement measurement described above, running under Google Consent Mode with storage denied by default. Google acts as a processor under a data processing agreement and may not use this data for its own advertising. Google processes this data in the United States; see our Privacy Policy for cross-border transfer details.

We do not share information collected on this website with advertisers, and we do not sell your personal information. See our Privacy Policy for more detail.

5. How long they last

• Session items are deleted when you close your browser.
• Persistent items, where used, remain until they expire or until you clear them in your browser. We do not set long-lived cookies for advertising or cross-site tracking.
• Local storage used for form processing remains on your device until you clear it.

Clearing local storage on your device does not delete information already submitted to us; you may request deletion of submitted information through the rights and deletion procedures in our Privacy Policy.

6. Your choices and how to control cookies

Because we use only essential and functional technologies plus cookieless analytics, and no advertising or cross-site tracking, no consent banner is required for this website. You remain in control:

• You can view, block, or delete cookies and clear local storage through your browser settings; help pages for major browsers explain how.
• Blocking strictly necessary items may cause parts of the website to stop working as intended.
• We honor "Do Not Track" and Global Privacy Control signals; in any case, we do not track you across other sites.
• If we introduce any non-essential or profiling technology in the future, we will update this policy and, where the law requires, ask for your consent first.

7. Legal bases and regional privacy rights

• EU / EEA (GDPR) and UK (PECR). Strictly necessary cookies are used on the basis of our legitimate interest in operating the website and are exempt from prior consent. We would obtain consent before placing any non-essential cookies.
• United States (including California CCPA/CPRA and Texas TDPSA). We do not sell your personal information and do not share it for cross-context behavioral advertising. Residents of these and other states with applicable privacy laws have rights described in our Privacy Policy, including the rights to access and delete personal information.

8. Changes and contact

We may update this Cookie Policy from time to time. Material changes will be reflected by the "Last updated" date above. Questions about our use of cookies and similar technologies: privacy@wellthrive-inc.com.