Cookie Policy

2.1 Cookies are small text files placed on a browser or device when a person visits a website or online service.

2.2 Similar technologies may include local storage, tags, scripts, SDKs, pixels, or other technologies that store or access information on a device or help us understand how a webpage or service is used.

2.3 For simplicity, this Policy refers to these technologies collectively as "cookies", unless the context requires otherwise.

3.1 NeuroPage uses cookies and similar technologies only for limited and specific purposes connected to operating, securing, measuring, and improving the Services.

3.2 Depending on the relevant page or service, cookies may be used to: (a) keep services functioning properly; (b) maintain session integrity or user preferences; (c) understand page performance and usage patterns; (d) measure engagement with NeuroPage-hosted personalized pages; and (e) support security, abuse prevention, and service diagnostics.

3.3 NeuroPage does not use this Cookie Policy to authorize unrestricted tracking. The categories of cookies actually used by NeuroPage are described below and may be updated from time to time as the service evolves.

4.1 The table below lists every cookie set on neuropage.io and inside the signed-in application, what it does, and how long it lasts. Strictly necessary cookies are set because the service cannot be delivered without them. Analytics cookies are set only after consent, and are not set at all if consent is refused or withdrawn.

4.2 Strictly necessary cookies may be set without consent to the extent permitted by applicable law, because they are required to provide the service you asked for.

5.1 On the NeuroPage website we use Google Tag Manager to load Google Analytics and Microsoft Clarity. These measure page views, sessions, device and browser attributes, referral context, and interaction signals. The tag manager container itself loads on page load; the analytics tags inside it are held in a blocked state and fire only once analytics consent has been given.

5.2 We use PostHog for product analytics in the signed-in application. PostHog runs on its EU Cloud, and no data is transferred outside the European Union for this purpose.

5.3 Where analytics data remains linked to a customer account, campaign context, or identifiable page usage, NeuroPage applies the retention limits set out in the Privacy Policy. Aggregated and de-identified analytics may be retained for longer for service improvement and benchmarking.

5.4 The providers named here and the data each one receives are listed in full on the Subprocessor List.

6.1 Personalized pages served by NeuroPage set no cookies and write nothing to local storage on the device of the person who opens them. No tag manager, advertising pixel, or third-party tracking script is loaded on these pages.

6.2 Page engagement is measured first-party and server-side: NeuroPage records that a page was opened, along with interaction events and technical request data such as device, browser, and IP address. Because a personalized page is generated for one named person, those events are linked to that person and are visible to the customer who sent the page.

6.3 No third-party analytics client, tag manager, or session-replay script is loaded on a personalized page. NeuroPage does not record session replays of the people who receive them.

6.4 NeuroPage does not offer customers a self-service option to place arbitrary third-party advertising pixels or custom tracking scripts on NeuroPage-hosted personalized pages unless expressly agreed otherwise in writing.

7.1 If a Customer deploys NeuroPage-generated content on a customer-owned domain, customer-managed hosting environment, or external website outside NeuroPage's direct operation, that Customer is responsible for the cookies, tracking technologies, scripts, consent practices, and disclosures applicable to that environment.

7.2 NeuroPage is not responsible for cookie banners, consent settings, or third-party tracking implementations on websites or domains that it does not operate.

8.1 Where required by applicable law, NeuroPage will rely on consent for non-essential cookies and similar technologies, including non-essential analytics cookies.

8.2 Where cookies are strictly necessary to provide a requested service or maintain the security and integrity of the website or Services, NeuroPage may use those cookies without consent to the extent permitted by law.

8.3 If a person refuses or withdraws consent for non-essential cookies, certain analytics, preferences, or measurement features may no longer function in the same way, but core access should remain available where legally and technically feasible.

9.1 Users can manage cookies through available cookie banners or preference tools where implemented by NeuroPage.

9.2 Most browsers also allow users to block, limit, or delete cookies through browser settings. Blocking all cookies may affect the functionality of some pages or services.

9.3 Where browser or device settings are used to reject cookies, some strictly necessary functionality, login continuity, or page delivery features may not operate correctly.

10.1 The lifespan of a cookie depends on whether it is a session cookie or a persistent cookie and on the technical purpose for which it is used.

10.2 Cookie-related information connected to identifiable, customer-linked, or page-linked analytics is retained only for limited periods as described in the Privacy Policy and applicable service settings.

10.3 Aggregated and de-identified analytics derived from cookie or interaction data may be retained for longer where they are no longer reasonably capable of being linked back to a specific individual, lead, personalized page, or customer campaign.

11.1 NeuroPage may use third-party service providers to help deliver analytics, hosting, security, or related infrastructure services. Those providers may place or read cookies or similar technologies on NeuroPage's behalf where necessary for the relevant service.

11.2 The providers that set or read cookies on our behalf are named in the table in Article 4. Every third party that receives personal data from NeuroPage, whether through cookies or otherwise, is named with its role, location, and data categories on the Subprocessor List.

11.3 This Policy does not govern the independent cookie practices of third-party websites, integrations, or services that a user may access outside NeuroPage-operated properties.

12.1 NeuroPage may update this Cookie Policy from time to time to reflect operational, legal, technical, or regulatory changes.

12.2 If changes are material, NeuroPage may provide notice through the website, platform, or other appropriate means. The "Last updated" date at the top of this Policy indicates when the most recent revision was made.

13.1 Questions about this Cookie Policy may be sent to: privacy@neuropage.io