Cookie Policy
Last updated: 25 May 2026
1. What Are Cookies
Cookies are small text files stored on your device when you visit a website. They are widely used to make websites function properly, provide security features, and remember your preferences.
2. Essential Cookies
These cookies are strictly necessary for the Service to function and cannot be disabled.
| Cookie | Purpose | Duration |
|---|---|---|
authjs.session-token | Maintains your login session (JWT-based, encrypted) | 7 days |
authjs.csrf-token | CSRF protection for form submissions | Session |
authjs.callback-url | Redirect after login | Session |
triagehealth_cookie_consent | Stores your cookie preferences | 1 year |
triagehealth_beta | Beta access gate (if enabled) | 30 days |
th_ref | Affiliate referral attribution (stores referral code from URL) | 30 days |
authjs.pkce.code_verifier | PKCE verification during OAuth sign-in (Google / GitHub) | 15 minutes |
authjs.state | OAuth state parameter for cross-site request protection during sign-in | 15 minutes |
oauth_link_pkce | PKCE verification during Google account-linking flow (if you connect Google to an existing account) | 5 minutes |
3. Analytics Cookies
We use Google Analytics 4 (GA4) to understand how people use TriageHealth so we can improve it. Analytics cookies are only set if you explicitly opt in via the cookie consent banner. They are not loaded by default.
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes unique visitors (Google Analytics) | 2 years |
_ga_<ID> | Maintains session state (Google Analytics) | 2 years |
No health data is sent to Google Analytics. GA4 collects only: page views, session duration, device type, browser type, and approximate geographic location (country/region level). IP addresses are anonymised before processing. No blood work results, assessment findings, dietary data, or any personal health information is ever transmitted to Google.
4. Cookies We Do Not Use
- Advertising cookies: We do not serve ads or use advertising cookies.
- Social media cookies: We do not embed social media widgets that set tracking cookies.
5. Cookieless Analytics
Vercel Analytics and Vercel Speed Insights are loaded on every page to measure Core Web Vitals and page-view counts. These services are cookieless by design — they do not set any cookies and do not collect personal identifiers. No opt-in is required.
6. Third-Party Cookies
Stripe (payment processor) may set cookies when you interact with payment forms. These are governed by Stripe’s Cookie Policy.
7. How to Withdraw Consent
You can change your cookie preferences at any time by clearing your triagehealth_cookie_consent cookie in your browser settings, which will re-display the consent banner on your next visit. You can also clear all cookies for this site through your browser settings. If you withdraw analytics consent, Google Analytics cookies will not be renewed and will expire naturally.
8. Managing Cookies in Your Browser
You can also manage cookies through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the Service.
9. Contact
Questions about our cookie practices? Contact us at info@triagemethod.com.