Cookie Policy
Last Updated: April 27, 2026
1. Introduction
This Cookie Policy explains how Welltory Inc. ("Welltory", "we", "us", or "our") uses cookies and similar tracking technologies on www.welltory.com, app.welltory.com, and other related pages (collectively, the "Service"). These technologies help us provide, improve, and protect our Service while enhancing your user experience.
Some of the purposes for which these technologies are used may require your consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
This policy should be read in conjunction with our Privacy Policy, which provides additional information about how we collect, use, and protect your personal data.
2. What Are Cookies and Similar Technologies
Cookies are small text files placed on your device when you visit our website. They are widely used to make websites work efficiently and provide information to website owners.
For simplicity, we use the term "Trackers" in this policy to refer to all technologies that allow us to access and store information or use resources on your device. These include:
- Cookies (browser-based text files)
- Web beacons and pixel tags
- Local storage objects
- Software Development Kits (SDKs)
- Other similar tracking technologies
Note: While cookies work on both web and mobile browsers, we use the term "Cookies" specifically for browser-based trackers. In mobile app contexts, we refer to other appropriate technologies like SDKs.
We use both first-party Trackers (managed directly by us) and third-party Trackers (enabling services provided by external providers). Unless otherwise specified, third-party providers may access the Trackers they manage.
The lifespan of these Trackers varies: some expire when you close your browser (session cookies), while others persist for longer periods as specified in the tables below. For more detailed information about specific Trackers, including their exact durations and additional technical details, you may consult the privacy/cookie policies of the respective third-party providers or contact us.
3. Types of Cookies We Use
3.1 Necessary Cookies
These cookies are essential for the operation of our Service, such as to recognize subscribers, help protect security, and prevent fraud. They enable you to navigate our website and use its core features like logging into your account or maintaining your session.
What happens if you disable them: If you block these cookies, some parts of our Service may not work properly. Without them, requested services such as accessing secure areas or processing transactions cannot be provided.
csrftoken
ProviderWelltory
PurposeAuthentication token for Welltory
Duration14 months
welltorysessionid
ProviderWelltory
PurposeWelltory session ID
Duration14 months
cookieyes-consent
ProviderWelltory
PurposeStores user cookie consent preferences
Duration1 year
next-auth.pkce.code_verifier
ProviderWelltory
PurposeFor authentication via Apple
DurationSession
next-auth.session-token
ProviderWelltory
PurposeManages and persists the user's session data for authentication
Duration30 days
next-auth-redirect-url
ProviderWelltory
PurposeTechnical cookie for redirect after authentication (returns user to the original flow)
DurationSession
__cflb
ProviderCloudflare
PurposeCookie for Cloudflare Load Balancer session affinity
DurationSession
__cf_bm
ProviderCloudflare
PurposeCloudflare uses this cookie for bot management, protection against malicious traffic, and ensuring website security
DurationExpires after 30 minutes of continuous inactivity
__cfseq
ProviderCloudflare
PurposeCookie for Cloudflare bot products: used to allow us to write rules that match valid or invalid sequences.
DurationSession
cf_clearance
ProviderCloudflare
PurposeCookie for Cloudflare bot products; also stores proof of challenge passed to prevent re-challenging and is required to reach an origin server
Duration1 year
cf_ob_info; cf_use_ob
ProviderCloudflare
PurposeCookies for Cloudflare Always Online
DurationSession
__cfwaitingroom
ProviderCloudflare
PurposeCookie for Cloudflare Waiting Room
DurationSession
__cfruid
ProviderCloudflare
PurposeSupports Cloudflare Rate Limiting (previous version)
DurationSession
_cfuvid
ProviderCloudflare
PurposeUsed for Rate Limiting Rules
DurationSession
cf_chl_rc_i; cf_chl_rc_ni; cf_chl_rc_m
ProviderCloudflare
PurposeInternal use cookies that allow Cloudflare to identify production issues on clients
DurationSession
__stripe_mid
ProviderStripe
PurposeStripe fraud prevention — identifies browser instance and persists user preferences
Duration2 years
__stripe_sid
ProviderStripe
PurposeStripe session cookie that helps manage and secure payment session details during transactions
DurationSession
CONSENT
ProviderGoogle Analytics
PurposeRecords user consent and privacy preferences for Google services
Duration1–2 years (depending on Google settings, user region, and applicable regulations)
IFTTT_Session
ProviderIFTTT
PurposeMaintains user authentication and session state on the IFTTT platform
DurationSession
3.2 Functionality Cookies
These cookies allow us to offer you enhanced functionality when accessing or using our Service. They enable our website to remember your choices (such as language preference, region, or username) and provide personalized features by tracking your preferences, interests, or past items viewed.
What happens if you disable them: You may not be able to customize your experience or save your preferences. Enhanced features and personalized content may be unavailable, requiring you to manually adjust settings each visit.
device-source
ProviderWelltory
PurposeRecords the source of the device or origin of the request for tracking or analytical purposes
Duration3 months
device-referrer
ProviderWelltory
PurposeCaptures the referrer URL from which the user navigated to the site for analysis and diagnostics
Duration3 months
lang
ProviderWelltory
PurposeStores the user's language preference to tailor the website experience accordingly
DurationSession
next-auth.callback-url
ProviderWelltory
PurposeStores the callback URL to redirect the user after authentication
DurationSession
next-auth.error
ProviderWelltory
PurposeOptionally stores error information during the authentication process
DurationSession
next-auth.csrf-token
ProviderWelltory
PurposeProvides protection against CSRF attacks during authentication flows
DurationSession
web_user
ProviderWelltory
PurposeUsed on the page for connecting direct data sources
DurationSession
WELLTORY_GET_APP_PERMANENT_SHOW
ProviderWelltory
PurposeUsed to manage the display of GET APP banner and button
Duration1 year
STRIDE_TERMS_CONSENT
ProviderWelltory
PurposeConsent for 3rd party Stride service
DurationSession
intercom-id-{id}
ProviderIntercom
PurposeIdentifies the user for Intercom's chat and messaging services
Duration6 months
intercom-device-id-{id}
ProviderIntercom
PurposeAssociates a specific device with a user session in Intercom for consistent tracking and support
Duration6 months
intercom-session-{app_id}
ProviderIntercom
PurposeManages active user sessions within Intercom, helping to maintain chat continuity
DurationSession
intercom-hash
ProviderIntercom
PurposeUsed for verifying and securing user data within the Intercom platform
DurationSession
NID
ProviderGoogle Analytics
PurposeStores user preferences and aids in personalization across Google services
Duration6 months
amplitude_session_id
ProviderAmplitude
PurposeSeparates data by session, allowing Amplitude to analyze individual user sessions and their corresponding interactions
DurationSession
AMP_TEST (and similar test cookies)
ProviderAmplitude
PurposeUsed internally by the SDK to verify that cookie storage is functioning correctly; temporary and removed after testing
DurationSession
AMP_TLDTEST
ProviderAmplitude
PurposeUsed by the SDK to determine which top-level domain supports cookie storage so cookies can be shared across subdomains as needed
DurationSession
VISITOR_INFO1_LIVE
ProviderYouTube Video Widget
PurposeEstimates a visitor's bandwidth for video playback
Duration6 months
PREF
ProviderYouTube Video Widget
PurposeStores user preferences (language, playback settings, etc.) for YouTube
Duration2 years
3.3 Measurement Cookies
We use these cookies to assess the performance of our Service as part of our analytic practices. They help us understand how visitors use our Service, determine if you have interacted with our messaging, identify popular pages, and improve website functionality. This information helps us optimize your experience and service quality.
What happens if you disable them: We will have limited ability to monitor site performance and understand user behavior patterns, potentially resulting in a less optimized experience as we cannot identify and fix issues or improve features based on usage data.
web_user
ProviderWelltory
PurposeIdentifies a web visitor across sessions for analytics and personalization purposes
DurationSession
_tt_enable_cookie
ProviderTikTok
PurposeEnables tracking by the TikTok Pixel, allowing the service to collect data on user interactions and behavior
DurationSession
_ttp
ProviderTikTok
PurposeStores tracking information used by TikTok Pixel to monitor and analyze user activity for advertising and performance metrics
DurationSession
_ga
ProviderGoogle Analytics
PurposeDistinguishes unique users by assigning a randomly generated client identifier, enabling user tracking across sessions
Duration2 years
_ga_{id}
ProviderGoogle Analytics
PurposeA variation of the _ga cookie, used for property-specific tracking in Google Analytics, particularly in multi-property setups
Duration2 years
_gid
ProviderGoogle Analytics
PurposeTracks user interactions during a single session, helping to measure session-specific metrics
Duration24 hours
_gat_UA-{id}
ProviderGoogle Analytics
PurposeThrottles the request rate to Google Analytics, ensuring efficient data collection by limiting the number of requests
DurationSession
gaVisitorUuid
ProviderGoogle Analytics
PurposeStores a unique identifier for each visitor session, assisting in accurately tracking individual user visits
Duration2 years
gaDomain-{id}
ProviderGoogle Analytics
PurposeSpecifies the domain context for tracking, ensuring that data is correctly attributed to the respective website within GA
Duration2 years
1P_JAR
ProviderGoogle Analytics
PurposeAggregates website statistics and helps measure conversion rates
Duration1 month
amplitude_id_{id}welltory.com
ProviderAmplitude
PurposeAssigns a unique identifier to each user for Amplitude analytics, enabling detailed tracking of user behavior across sessions
Duration1 year
AMP_{first10digits_API_KEY}
ProviderAmplitude
PurposeStores core information such as device ID, user ID (if available), session ID, and last event timestamp
Duration1 year
AMP_MKTG_{id}
ProviderAmplitude
PurposeUsed for Amplitude analytics
Duration1 year
AMP_{id}
ProviderAmplitude
PurposeUsed for Amplitude analytics
Duration1 year
amp_{id}
ProviderAmplitude
PurposeUsed for Amplitude analytics
Duration1 year
amp_{id}_welltory.com
ProviderAmplitude
PurposeUsed for Amplitude analytics
Duration1 year
amp_https:
ProviderAmplitude
PurposeUsed for Amplitude analytics
Duration1 year
YSC
ProviderYouTube Video Widget
PurposeTracks video views for embedded YouTube players
DurationSession
3.4 Marketing Cookies
We use these cookies to deliver content, including advertisements, relevant to your interests on our Service or third-party services. They help us track advertising campaign effectiveness, limit ad frequency, and better understand the performance of our ads or content recommendations. These cookies may also build a profile of your interests to show you relevant ads on other websites.
What happens if you disable them: You will still see advertisements, but they may be less relevant to your interests. We will also have limited ability to measure advertising effectiveness and optimize our marketing efforts.
_fbc
ProviderFacebook
PurposeStores the Facebook Click ID (fbclid) information to attribute traffic and track interactions stemming from Facebook ads
Duration90 days
_fbp
ProviderFacebook
PurposeAssigns a unique identifier to a user's browser for delivering targeted advertising through Facebook Pixel
Duration90 days
_gcl_ag
ProviderGoogle Analytics
PurposeUsed for Google Ads conversion tracking, aggregating ad interaction data
Duration1 year
_gcl_au
ProviderGoogle Analytics
PurposeUsed for Google Ads conversion tracking by capturing ad click data
Duration3 months
_gcl_dc
ProviderGoogle Analytics
PurposeUsed by Google Display & Video 360 for conversion tracking and ad attribution
Duration90 days
_gcl_gb
ProviderGoogle Analytics
PurposeVariant cookie for tracking ad conversions on specific domains
Duration90 days
_gcl_gf
ProviderGoogle Analytics
PurposeCaptures conversion and click information for granular ad tracking
Duration90 days
_gcl_gs
ProviderGoogle Analytics
PurposeStores conversion-related data for certain Google ad integrations
Duration90 days
_gcl_ha
ProviderGoogle Analytics
PurposeUsed in some Google ad campaigns for tracking and attribution
Duration90 days
IDE
ProviderGoogle Analytics
PurposeFacilitates remarketing by linking user interactions with Google Ads
Duration1 year
ANID
ProviderGoogle Analytics
PurposeSupports ads personalization by delivering tailored ads across Google's advertising network
Duration1 year
AMP_MKTG_{first10digits_API_KEY}
ProviderAmplitude
PurposeTracks attribution data (e.g., UTM parameters, referrer, click identifiers) used to analyze marketing campaigns
Duration1 year
appsflyer_uid
ProviderAppsflyer
PurposeUsed for mobile app attribution and tracking user behavior for marketing analytics
Duration1 year
3.5 Third-Party Service Providers
The following table lists all third-party service providers whose cookies and tracking technologies are used on our Service. For detailed information about how these providers handle your data, please refer to their respective policies.
4. How to Manage Your Cookie Preferences
You have the right to control the use of cookies and similar tracking technologies. The controls available to you depend on your location and applicable law.
4.1 Cookie Preference Controls
California and other US state residents: The use of certain advertising cookies and tracking technologies on our website — including Meta (Facebook) Pixel (_fbc, _fbp) and Google Ads/Ad Manager (_gcl_ag, _gcl_au, IDE) — may constitute "sharing" of personal information for cross-context behavioral advertising under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
You have the right to opt out of the sharing of your personal information and the processing of your personal information for targeted advertising. To exercise this right, you may: (1) click the "Your Privacy Choices" link in our website footer or the green padlock icon (powered by iubenda) and toggle off "Sharing of my personal information" and/or "Processing of my personal information for targeted advertising"; (2) use a browser or extension with Global Privacy Control (GPC) enabled — we honor GPC signals automatically; or (3) contact us at [email protected].
All other users: When you first visit our website, you will see a cookie consent banner allowing you to accept or reject different categories of cookies. You can review and change your preferences at any time by clicking the "Your Privacy Choices" link or the green padlock icon (powered by iubenda) in our website footer. Note that the options displayed in the preference panel vary depending on your location and the privacy laws applicable to you.
4.2 Browser Settings
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete certain cookies. However, if you block or delete cookies, some features of our website may not function properly.
For information on managing cookies in popular browsers:
5. Updates to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
We encourage you to review this Cookie Policy periodically to stay informed about how we use cookies.
6. Questions
If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies, please contact us at: [email protected].
If you are in Europe, you may also contact our representative at:
For more information about our data practices, please refer to our Privacy Policy.