Cookie Policy
Effective 2026-09-22
We set two cookies, and they are both analytics
Until 22 September 2026 this page said we set none, and invited you to open developer tools and find the cookie store empty. That changed when we added Google Analytics 4, and the invitation stands with a different answer: open the Application or Storage tab and you will find exactly the 2 cookies named below, and nothing else. No advertising cookies, no preference cookies, no fingerprinting. If you find anything not on this page, we have got it wrong and would like to be told.
The cookies we set
Both are first-party, both are set by Google Analytics 4, and both are used to count visits rather than to build an advertising profile. We do not serve advertising and share nothing with ad networks.
| Name | What it does | How long it lasts |
|---|---|---|
| _ga | Distinguishes one browser from another so repeat visits are not counted as new people. | 2 years |
| _ga_G-5HMTQ2NKHG | Holds the session state for this specific property. | 2 years |
Turning it off
Three ways, none of which require anything from us. Your browser can block cookies for this domain. Most browsers also send a Do Not Track or Global Privacy Control signal, and we honour GPC. And Google publishes a browser add-on that opts you out of Google Analytics across every site that uses it.
Every category, and what we use
Cookie notices usually list the cookies a site sets. Ours lists the categories a site could set, so you can see the shape of what we have declined rather than just an empty table.
| Category | Typically used for | What we use |
|---|---|---|
| Strictly necessary | Session management, load balancing, CSRF tokens | None. The site is statically generated and holds no session. |
| Preference / functional | Remembering theme, language, or dismissed banners | None. Light and dark rendering follows your operating system setting, which we read but never store. |
| Analytics / performance | Google Analytics, Plausible, Hotjar, session replay | Google Analytics 4, which sets the two cookies listed above. No session replay, no heatmaps, no scroll tracking. |
| Advertising / targeting | Ad network tags, retargeting pixels, conversion tracking | None. We serve no advertising and carry no ad-tech. |
| Social media | Share widgets, embedded feeds, social login | None. Any social links are plain hyperlinks with no embedded script. |
Other storage technologies
Cookies are not the only way sites store or read data on your device. For completeness, we also use no localStorage, sessionStorage, IndexedDB, web beacons or tracking pixels, and no device or browser fingerprinting. The analytics tag above is loaded from googletagmanager.com, which is the one third-party request this site makes; every font, script and image otherwise comes from our own origin. The interactive tools on this site — the provider match quiz, the cost pathway tool, and the glossary search — run entirely in your browser’s memory. Your answers are never transmitted to us and are gone when you close the tab.
What still reaches a server
Requesting a page necessarily sends a request to our host, Vercel Inc., which processes standard log data including your IP address and browser type. That is not a cookie and it is not avoidable for any website. It is covered in our Privacy Policy.
Links to other sites
We link heavily to primary sources — the FDA, DailyMed, medical journals — so you can check our work. Those sites set their own cookies once you arrive, and most of them do. Our Our Sources page lists the authorities we draw from.
If we ever add one
If we introduce any cookie or storage technology beyond what is described here, we will update this page before it ships, and where the law requires consent for non-essential cookies we will ask for it properly — with a genuine reject option, not a pre-ticked box or a dark pattern.
Questions
Email privacy@glp1.healthcare.