Cookie Policy

Cookies are small text files placed on your device by a website. Similar technologies include local storage and session storage. Cookies can be "first-party" (set by the site you are visiting) or "third-party" (set by another company, often for advertising or cross-site tracking). We use first-party cookies to operate the Platform, and the third-party technologies described in Section 3.

We use cookies and similar technologies on our website only for operational purposes:

• Strictly necessary cookies. Required for the Platform to function, including session management, authentication, security, and fraud prevention. The Platform cannot work properly without these.
• Functional cookies. Remember your preferences, such as your language and market selection.
• Anonymous session storage (web only). For visitors who browse before creating an account, we keep an opaque session identifier so your activity can continue within that session. This stores only an opaque identifier in your browser; no sensitive personal information is stored in your browser. This applies to the website only; the mobile app does not offer anonymous browsing.

We name every third-party technology we use, and we do not treat them all the same — because they do not all do the same thing to your privacy.

On by default. You can turn these off.

• Google Tag Manager (Google) and the Meta advertising pixel(Meta Platforms) — measure how our advertising performs. The Meta pixel allows that measurement to work across other websites, which under California law counts as "sharing" your personal information.
• Vercel Analytics (Vercel) — aggregate counts of traffic to our own pages.

Off unless you switch it on.

• Contentsquare — records how you move through a page: which areas you see, click and scroll. We keep this off by default, and it only runs if you turn it on.

Two situations override those defaults, and then nothing beyond the strictly necessary loads at all:

• Your browser sends a recognized opt-out preference signal, such as the Global Privacy Control.
• You are in Washington State, where we ask for your choice before loading anything.

We do not use browser-fingerprinting technologies, and we never place health questionnaire responses, policy numbers or payment details into any analytics or advertising technology.

We measure aggregate use of the Platform to understand which parts work and which do not. Some of that measurement is first-party and server-side, and stays within our systems. The rest goes through Vercel Analytics, and — if you have switched it on — Contentsquare. Both are third-party providers bound by contract to process this data only on our instructions.

We do not build advertising profiles about you.

We measure how our advertising performs with the Meta pixel and Google Tag Manager in your browser, as described in Section 3. That measurement does not include your health information, your policy details or your payment information. If you turn off advertising measurement, opt out of marketing, or send a recognized opt-out preference signal, we stop loading them. You can manage marketing preferences in your account settings.

The first time you visit, a notice tells you what we use and lets you decide. You can accept everything, keep only the essentials, or choose category by category. Strictly necessary cookies are not part of that choice, because the Platform cannot operate without them.

You can change your decision at any time — including long after that first visit — from the Your Privacy Choices link in the footer of every page. We record your choice together with the date on which you made it, so that we can evidence it.

If you are in Washington State, that notice appears before we load anything beyond the strictly necessary, and we wait for your answer.

You can control or delete cookies through your browser settings, and you can set your browser to refuse some or all cookies. Please note that if you block or delete strictly necessary cookies, parts of the Platform may not function, including signing in and maintaining your session.

We honor recognized browser-based opt-out preference signals, including the Global Privacy Control (GPC). When we receive one, we do not load any of the technologies listed in Section 3, and we treat the signal as an opt-out of marketing and of the "sharing" of your personal information for cross-context behavioral advertising. We do not sell your personal information.

The mobile app does not use cookies in the traditional web sense. It uses device storage to keep you signed in securely and to support security features, and it uses a push notification token to deliver notifications you have enabled. The mobile app does not offer anonymous browsing and does not place advertising or third-party tracking technologies on your device.

We may update this Cookie Policy from time to time. When we make changes, we will update the "Last Updated" date above and, where the change is material, provide notice through the Platform.

For questions about this Cookie Policy or our privacy practices: