Last updated: April 9, 2026

Cookie Policy

WellCub uses a minimal approach to cookies — we only use what is strictly necessary to operate the platform securely. We do not use advertising cookies, tracking cookies, or third-party analytics that store personally identifiable information.

Cookies We Use

1. Authentication Session Cookie (Essential)

Purpose: Keeps you logged in to WellCub during your session.
Duration: Session (expires when you close your browser or after 15 minutes of inactivity per HIPAA requirements).
Type: HTTP-only, Secure, SameSite=Lax
Can it be disabled? No — this cookie is essential for WellCub to function. Disabling it will prevent you from logging in.

2. CSRF Protection Token (Essential)

Purpose: Prevents cross-site request forgery attacks on form submissions.
Duration: Session
Type: HTTP-only, Secure

Cookies We Do NOT Use

❌ Google Analytics or any third-party analytics that store PHI
❌ Facebook Pixel or other advertising tracking
❌ Cross-site tracking cookies
❌ Marketing or retargeting cookies
❌ Social media embed cookies

We take this approach because storing protected health information (PHI) in third-party analytics systems would violate HIPAA.

How to Clear Cookies

To clear cookies from your browser:

Chrome: Settings → Privacy and security → Clear browsing data → Cookies
Safari: Settings → Safari → Clear History and Website Data
Firefox: Settings → Privacy & Security → Cookies and Site Data → Clear Data
Edge: Settings → Privacy, search, and services → Clear browsing data

Note: Clearing cookies will log you out of WellCub.

Changes to This Policy

If we add new cookies, we will update this page and notify users with at least 30 days notice.

Contact

Questions: hello@wellcub.com