Cookie & Storage Policy

A cookie is a small text file a website saves in your browser. Browsers also offer “localStorage” and “sessionStorage” for small amounts of data, and phones offer secure storage to apps. This policy covers all of them on teleheal.com, the member app at app.teleheal.com, the HEAL shop at shop.teleheal.com, and the HEAL desktop and mobile apps.

We keep this list short on purpose. Several items are shared across teleheal.com addresses, so the website and app recognise one sign-in and one cookie choice. None of them hold workbook content, check-in notes, mood or meeting details.

• Strictly necessary: sign-in, security and bot checks, remembering your cookie choice, and, in the shop, your cart and payment fraud prevention. HEAL can’t work without these, so they don’t need consent. They’re never used for analytics or advertising.
• Preferences: settings that remember how you like things. The member apps currently keep these on your account, not in your browser. The only preference stored on your device is your cookie choice, listed with the strictly necessary items.
• Analytics: our own first-party analytics, and Google Analytics 4 on the public website. These help us learn which pages and features help people. Never sold.
• No marketing or advertising category. HEAL runs no ads, so we don’t ask for advertising consent and Google Analytics never gets advertising storage. See “Consent Mode” below.

Without analytics consent, our own analytics still counts page views, but with no cookie and no identifier: each visit is grouped by a hash of your IP address and browser that changes daily, and bots are filtered out. If you’re signed in, the sign-in cookie below lets our own analytics link website visits to your account ID. We never send your account ID to Google.

Our analytics also notes the campaign tags (such as utm_source) and ad-click identifiers (gclid, fbclid, ttclid) in the link you arrived from, and the referring website, so we know which outreach works. They’re stored with the visit, not in a cookie.

The member web app at app.teleheal.com doesn’t load Google Analytics or our website tracker, and doesn’t store anything else in your browser’s localStorage or sessionStorage. Its data is fetched fresh from our servers and isn’t cached on your device between visits.

The shop at shop.teleheal.com is optional. It shares the website’s cookie choice and sign-in cookie across teleheal.com addresses, and adds these items:

Stripe’s payment fields run on our checkout page in a secure frame, so your card details go straight to Stripe and never touch HEAL’s servers. Stripe’s cookies are used for security and fraud prevention, not advertising, so they’re strictly necessary and don’t depend on your analytics choice. A Cloudflare Turnstile bot check may also run before checkout and before support payments. If you block Stripe’s cookies, checkout may not work.

Supporter plans are paid on Stripe’s own checkout page, and managed in Stripe’s Customer Portal, both of which follow Stripe’s cookie policy.

Google Analytics runs in Google Consent Mode v2. Before Google’s script loads, we tell it what you’ve allowed:

• Advertising, everywhere: ad_storage, ad_user_data and ad_personalization are always denied, for every visitor, and never updated. Ad identifiers are redacted, Google signals and ad personalization signals are off, and we tell Google not to pass click identifiers between pages.
• United States: analytics starts on, with a notice and a one-click way to turn it off. “Your privacy choices · Do not sell or share my info” in the notice links to our no-sale, no-sharing commitment; there is nothing to switch off, because we don’t sell or share for advertising.
• Everywhere else (including the EU, EEA, UK and Switzerland): analytics starts off. Google receives only cookieless signals, and no _ga or sx_vid cookie is set until you choose “Accept all” or switch analytics on. “Reject all” is as easy as “Accept all”.
• Region detection uses the ga_geo country cookie. If it’s missing, we fall back to your device’s time zone.
• Global Privacy Control (GPC): if your browser sends a GPC signal and you haven’t made a choice, we treat it as an opt-out of sale and sharing and of optional analytics: Google Analytics storage stays denied and no sx_vid cookie is set. You can still switch analytics on yourself in Cookie settings.

• On the website: select “Cookie settings” in the footer to reopen your preferences and switch analytics on or off. Your choice applies across teleheal.com addresses for a year. If you withdraw analytics consent, we delete the sx_vid cookie.
• In your browser: you can block or delete cookies and site data. Blocking the sign-in cookie stops you signing in, and clearing site data resets your cookie choice.
• Google Analytics: Google offers a browser add-on that blocks Google Analytics on every site.
• GPC: turn on Global Privacy Control in a browser or extension that supports it.

The desktop app shows the same member app and keeps:

• the sign-in cookie above, in the app’s own private browser storage on your computer;
• a small settings file, heal-desktop.json, in the app’s data folder. It holds the window size and position, and the IDs of meetings it has already reminded you about, so a restart doesn’t repeat a reminder. Those IDs are removed after two days. It never holds sign-in tokens, workbook content or meeting names.

The desktop app sends no analytics events. Signing out removes the session, and uninstalling the app removes its data folder (on some systems you may need to delete the folder yourself).

The iOS and Android apps don’t use cookies in the browser sense. They keep these items in the phone’s secure storage (the iOS Keychain or Android’s encrypted storage):

The mobile app sends usage events (screens, feature use, performance and errors, never anything you typed) to our server, which stores them keyed to the install ID and, when you’re signed in, your account ID. Only app opens, sessions, screen names, errors and performance timings are passed on to Google Analytics, keyed to the install ID and never your account ID; feature use such as joining a meeting, saving a check-in or posting a help request stays with HEAL. The app contains no Google or advertising SDK. You can turn notifications off in your phone’s settings at any time. Deleting the app removes everything it stored, though on iOS, Keychain items can sometimes survive until the device is reset.

HEAL staff and volunteers who use the staff console get the sign-in cookie, plus two preference cookies (heal-admin-theme and heal-admin-sidebar, 1 year) and saved table views in localStorage (keys starting heal-admin:views:). These appear only on the staff console, never for members.

If we add a cookie or storage item, we’ll add it to this page before it goes live, and ask again where your consent is needed. See the Privacy Policy for how we use the information, and the Consumer Health Data Privacy Policy for health-related data. Questions: privacy@teleheal.com.