Cookies & privacy choices

1. Cookies and similar storage

A cookie is a small value stored by a website in your browser. Browser storage can also keep information without using a cookie. These mechanisms can maintain a sign-in session, remember a choice, or support third-party advertising. Their purpose matters more than the name of the storage technology.

Read this page with the Privacy Policy, which describes information sent to Supabase, OpenAI, hosting services, and support. Turning off advertising does not stop processing necessary for a feature you choose to use.

2. Authentication and site operation

Supabase authentication uses session information and cookies to keep account access working. These are separate from advertising consent. Blocking or removing authentication cookies can prevent sign-in or sign you out. Do not enter sensitive health information in shared account-profile fields.

Hosting and technical services also process request information to operate and protect the site. NOW HEALTH includes Vercel Web Analytics. See Vercel Analytics privacy information for details about that service; it is not the Google advertising-consent control.

3. Optional saving on this device

Member conversations, notes, preparation, and the supported model preference use session memory by default. Saving in this browser is optional and account-specific. If you choose it, browser storage can retain a local copy; it is not an encrypted medical vault, cloud backup, or synchronization service.

Use Profile data controls to manage supported local copies and exports. Clearing browser data may remove saved work. Someone controlling the browser or device may access it. Your device-saving choice does not grant Google advertising permission.

4. Google and partner advertising cookies

Google AdSense is installed only for the public production homepage at nowhealth.ai. Guides, member tools, authentication, contact/support, emergency resources, and policy pages do not run the advertising loader. Preview and development hosts do not run it either.

Third-party vendors, including Google, use cookies to serve ads on participating websites. Google advertising cookies can enable Google and its partners to serve ads based on visits to a site and/or other sites on the Internet. NOW HEALTH requests non-personalized advertising rather than health-based personalization. Non-personalized ads can still use cookies or identifiers for functions such as delivery, frequency control, fraud prevention, and measurement; they are not automatically cookie-free or consent-exempt.

Google and participating vendors may process device, network, public-page, and ad-interaction information. When configured, the real Google consent message identifies participating vendors and their purposes. Cookie names and retention periods depend on the services and configuration; this policy does not invent a universal lifetime for third-party cookies.

See Google advertising technologies and how Google uses information from partner sites. Our tools do not send your prompts, notes, visit preparation, or profile identifiers as advertising targeting or measurement data.

5. Consent and advertising controls

On an eligible homepage, the Google tag can connect to Google to load its configured Privacy & messaging service before ad requests are allowed. That initial connection can disclose technical information such as an IP address, browser details, and the public URL. Ad requests stay paused unless the required consent and US state privacy signals can be confirmed. Missing, blocked, or unconfigured consent services do not count as permission.

Turn off homepage advertising to stop the advertising loader in a new homepage document. On the canonical HTTPS site, this stores the preference cookie now-health-advertising-off for up to one year. The cookie contains an opt-out value, not health notes or an account identifier. The control applies to this browser, not to every device or a Google account.

Review homepage advertising choices to explicitly clear that site opt-out and let the Google consent service run. Where applicable and configured, the service offers the European consent message; Google also provides its applicable US state Do Not Sell or Share entry point. Opening review does not itself mean you consent to ads. The site also honors a browser Global Privacy Control signal by keeping homepage advertising off.

These site controls do not delete cookies Google already set or remove information already processed by a provider. Google consent choices and site device-saving preferences are separate.

6. Third-party and browser choices

You can manage Google personalized-advertising preferences through Google My Ad Center. You can also learn about participating third-party opt-outs at YourAdChoices. These controls do not necessarily stop all advertising, and their scope depends on the provider, region, and browser.

Your browser settings can block or delete cookies and site storage. Doing so may sign you out, remove optional saved work, and remove the site advertising opt-out cookie. A Global Privacy Control browser setting can provide an additional ongoing signal. Changing one browser does not change another device.

7. Questions and changes

Changes to site features or advertising configuration may require updated disclosures. The effective date above identifies this policy version. Use the Contact page for privacy questions without including medical records or other sensitive details.