The short version
Apothify uses a small number of strictly necessary cookies to operate the Site, plus a single privacy preserving analytics setup. We do not use advertising cookies, retargeting pixels, or cross site tracking. Every cookie we set is listed below with its purpose and duration.
What is a cookie
A cookie is a small text file that the Site asks your browser to store on your device. The browser then sends that file back to the Site on later visits so the Site can recognize you between pages and between sessions. Cookies are also used to remember preferences, keep you signed in, store the contents of your cart, and measure how the Site is used.
Strictly necessary cookies
These cookies are required for the Site to function. They cannot be disabled in our cookie controls because the Site will not work correctly without them.
APOTHIFY_CSRF— a security token that protects every form submission from cross site request forgery. Lifetime: 7 days.APOTHIFY_CART— a signed cookie that remembers the contents of your cart between pages and between sessions. The cookie is HMAC signed so the contents cannot be tampered with. Lifetime: 7 days.APOTHIFY_ENTRY— a signed cookie that remembers your research use acknowledgment so you do not have to accept it on every page. Lifetime: 30 days.APOTHIFY_LAST_ORDER— a short lived cookie that lets the checkout success page render your order summary without exposing the order ID to anyone who guesses URLs. Lifetime: 1 hour.
Analytics
Apothify uses Google Analytics 4 to understand how the Site is used in aggregate.
- Measurement identifier:
G-7NBVXGZ1D3 - Cookies set:
_ga(24 months),_ga_*(24 months) - IP anonymization: enabled
- Google Signals: disabled
- Advertising features: disabled
- Cross device tracking: disabled
We use Google Analytics only for site improvement (which pages are visited, which products are viewed, which forms are completed). We do not use it for advertising and we do not share the data with advertisers.
Marketing email
If you opt in to research and product updates, your email is sent to Resend (our email delivery provider) for distribution. Resend does not set cookies on your browser. The email itself may include open and click tracking that uses a transparent pixel and a redirect link. This tracking is per message and not used to follow you around the web. You can unsubscribe at any time from the link at the bottom of every marketing email or by emailing support@apothify.com.
Cookies we do not use
For clarity, the Site does not use any of the following:
- Advertising or retargeting cookies from Meta, TikTok, X, Google Ads, or similar networks
- Conversion pixels from any advertising network
- Cross site tracking cookies
- Session replay tools such as Hotjar, FullStory, or LogRocket
- Third party customer support widgets that load cookies (Intercom, Drift, Zendesk Chat, etc.)
Local storage and similar technologies
The Site uses browser local storage for two narrow purposes:
- Remembering your most recent /track/ order lookup so you do not have to retype it
- Caching a small amount of catalog metadata so subsequent page loads feel faster
Local storage is not transmitted to Apothify and is cleared whenever you clear your browser's site data.
How to control cookies
All modern browsers let you block or delete cookies through your settings:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Settings → Privacy and Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions → Manage and delete cookies and site data
You can opt out of Google Analytics specifically by installing the official Google Analytics Opt out Browser Add on.
Blocking the strictly necessary cookies will break parts of the Site (you will not be able to add to cart, you will be challenged on every page for the research use acknowledgment, and form submissions will be rejected).
Do Not Track and Global Privacy Control
Apothify honors Do Not Track and Global Privacy Control (GPC) signals by suppressing Google Analytics for sessions that send either signal. Since we do not sell or share personal information, there is no additional behavior to disable on receipt of a GPC signal.
Updates to this policy
Apothify may update this policy from time to time. The version stamp at the top of this page reflects the current version.
Contact
Cookie questions should be directed to support@apothify.com.
NoteThis page is provided for information only. It is not legal advice. If you have a specific legal question, consult an attorney licensed in your jurisdiction.
