CONNEQT Cookie and Tracking Notice
Effective date: August 27, 2026
Last updated: August 27, 2026
Version: 1.0.9
This Notice explains how CONNEQT, Inc. uses cookies, pixels, tags, local storage, cookie-free aggregate measurement, and similar technologies on a CONNEQT website surface where this Notice and the described privacy controls apply. It does not, by itself, describe a different site or subdomain that does not display the same notice and controls.
It does not describe health information collected through the CONNEQT Health app or CONNEQT PULSE. See our Consumer Health Data Privacy Policy and, where applicable, Washington Consumer Health Data Privacy Policy for that information.
1. Our consent model
Necessary technologies operate when needed to provide a website or function you request. CONNEQT also collects limited cookie-free aggregate activity without creating a visitor, session, customer, or cross-page history, except where applicable law requires consent for covered collection. Optional detailed analytics and marketing technologies remain off unless the applicable privacy choice allows them.
The Site insights choice covers optional detailed first-party collection and approved minimized service-provider collection for site analytics and attribution. The Partner measurement choice covers eligible minimized disclosures to external advertising, affiliate, and campaign-measurement providers for measurement, optimization, or targeted advertising.
Outside the Washington flow, the privacy panel may initially present Customize and Accept all. Customize expands separate Site insights and Partner measurement choices. Each purpose offers Decline and Allow; neither is preselected for a new visitor using the separate controls, and Save choices becomes available after both purposes are answered. You may return to the Privacy choices section of this Notice to review or change either selection later.
For a consumer reasonably identified as being in Washington, the same panel presents a separate, unchecked collection choice and a separate, unchecked external-sharing choice. The Washington panel does not use a single bundled acceptance for those choices. If the consent system is missing, unavailable, or unclear, optional tracking and covered Washington collection or sharing are designed to remain off.
2. Categories and retention
| Category or activity | Purpose | Typical duration |
|---|---|---|
| Strictly necessary | Security, fraud prevention, network operation, checkout, account access, load balancing, consent choices, and other functions you request. | Session-based or for the period needed for the function. The cookie recording a privacy choice is currently configured for up to 365 days. |
| Cookie-free aggregate measurement | Produces population-level counts and values for website, product, cart, transaction, campaign, coarse-geography, device-family, performance, error, form, and navigation reporting without creating a visitor or session history. | Aggregate source and delivery records are retained for up to 90 days. Aggregate reports that are no longer linked to raw visit histories may be retained for up to 60 months. |
| Preferences | Remembers optional settings or features selected by the visitor. | Varies by setting and is shown in the live cookie inventory where applicable. |
| Site insights | Measures detailed visits, health-related page and product activity, cart and purchase activity, site performance, and first-party campaign and affiliate attribution so we can understand site use and acquisition. | The first-party campaign session identifier lasts approximately 30 minutes; its visitor identifier and related attribution records last up to 90 days. Available provider-specific periods are shown in the live inventory. |
| Partner measurement | Supports external advertising and affiliate measurement, audience and campaign optimization, and targeted advertising or related cross-site activity where permitted. | Varies by provider and is shown in the live inventory. |
The current cookie and service inventory appears below the Privacy choices section of this Notice and forms part of this Notice. It is updated when an active technology, purpose, or available retention period changes.
3. Matomo and aggregate reporting
The Matomo configuration described here applies to Main, Insights, and Shop on conneqthealth.com. It does not apply to content.conneqthealth.com.
CONNEQT operates Matomo as a self-hosted analytics service, with infrastructure hosted for CONNEQT by DigitalOcean. Matomo keeps consented detailed analytics separate from cookie-free aggregate reporting.
Detailed Matomo analytics remain off until the Site insights choice permits them. The _pk_id visitor cookie is configured for up to 90 days, the _pk_ses session cookie for approximately 30 minutes, and the referral cookie for up to 90 days. Cookie names may include a site-specific suffix. Detailed raw visit and action records are retained for up to 90 days.
Cookie-free aggregate reporting records only approved generalized dimensions and totals, such as surface and route class; safe page, product, cart, and commerce categories; sanitized campaign and referrer-domain information; coarse country or region; device, browser, operating-system, and viewport families; performance and error buckets; and event counts, values, or units. Repeated activity may produce repeated counts. The system does not identify unique people, reconstruct individual journeys, or attribute an anonymous purchase to an anonymous campaign.
The aggregate source and transport do not retain a raw IP address, raw user-agent string, raw URL or query string, full referrer, visitor or session identifier, customer or account identifier, order or cart identifier, advertising click identifier, token, search term, form value, contact information, prescription information, or support content. Technical network information is used transiently to receive and secure a request and may provide a coarse country or region before the raw address is discarded.
CONNEQT takes reasonable measures designed to prevent aggregate or de-identified information from being associated with an individual or device, publicly commits not to attempt re-identification, and contractually requires a recipient to comply with those restrictions where applicable law requires those measures.
4. Optional detailed analytics and marketing information
When the applicable choice permits it, CONNEQT's detailed first-party systems may process:
- an opaque visitor or session identifier;
- browser, device, operating-system, and general network information;
- an IP address used for transport and coarse analytics after at least two bytes are masked before visit enrichment;
- page, product, cart, and interaction events, including whether health-related content or a health-related product was viewed or selected;
- referral origin and campaign parameters;
- advertising or campaign click identifiers;
- detailed transaction information for a confirmed purchase, such as internal order identifier, product, value, currency, and event identifier; and
- attribution, campaign, audience, or general website-interest information generated from those events.
Health-related page, product, cart, and purchase signals can reveal or support an inference about a visitor's health interests and may qualify as consumer health data under applicable law.
An external advertising, affiliate, or campaign-measurement destination receives only an approved subset needed for its permitted purpose. A consented conversion may include a generic event name, pseudonymous event, cookie, browser, or device identifier, campaign or advertising click identifier, value, currency, quantity, time, and technical network information automatically associated with the request. It does not include detailed product identity or a raw order identifier.
Google and other external advertising or campaign-measurement providers do not receive an add-to-cart, purchase, or other advertising event before the applicable collection, Partner measurement, external-sharing, and Global Privacy Control policy permits it. A permitted conversion may include the generic event, pseudonymous event, campaign or advertising click identifier, value, currency, quantity, time, consent state, and technical network information automatically associated with the request, and may indicate interest in a health-related product.
CONNEQT's first-party attribution system and approved external marketing-event payloads do not use names, email addresses, telephone numbers, street addresses, device readings, app health records, reports, assessments, prescription or eligibility information, account or profile content, or support content as advertising or marketing-event fields.
5. Sensitive workflows
On website surfaces covered by this Notice, CONNEQT restricts optional external advertising, affiliate, campaign-measurement, and chat tracking within checkout, account, prescription, eligibility, return, warranty, privacy-request, account-deletion, contact, help, and support workflows, even when a visitor previously accepted optional technologies. Controlled legal documents and CONNEQT's operational privacy-request, account-deletion, and privacy/security-report pages do not use optional detailed analytics. Necessary technologies and permitted cookie-free aggregate measurement may still operate, subject to any consent required by applicable law.
Permitted measurement on a sensitive workflow uses a stable generic workflow label instead of the requested URL or page title. Cookie-free aggregate reporting may record generalized page, departure, engagement-time, quality, and server-derived commerce counters. Consented detailed Matomo measurement may record allowlisted events such as entering checkout, submitting checkout, a confirmed purchase, or a refund, together with approved cart or transaction values and product information. Neither system collects a checkout, account, prescription, eligibility, support, contact, return, warranty, or privacy-request form field. Onsite search terms and requested addresses of missing pages are not sent to Matomo; only generic Search and Not Found labels are recorded.
On an order-confirmation page, a detailed purchase event may be recorded for first-party attribution when the Site insights choice permits it. A minimized conversion may be disclosed to an eligible external destination only after the commerce system confirms payment and the required Partner measurement or separate external-sharing choice permits that destination.
6. Campaign and ecommerce measurement
When Site insights is permitted, CONNEQT may maintain a first-party attribution record that distinguishes the visitor's original external campaign, later campaign touches, the current session, internal promotions, and relevant page, product, cart, and purchase activity. A confirmed order may receive a fixed attribution snapshot so later visits do not rewrite the acquisition record.
Cookie-free aggregate reporting measures generalized event volumes and values but does not join a non-consenting visitor's campaign activity to a later purchase. Website tracking can measure a consented click from CONNEQT to an app store. It cannot by itself observe an app install, app-store subscription, renewal, refund, or in-app purchase.
7. Providers
Services may include CONNEQT's Matomo analytics service, DigitalOcean as its host, and providers of digital advertising, campaign measurement, affiliate attribution, customer chat, and related marketing technology. The current identities, purposes, cookie names, and available retention information are displayed in the live cookie and service inventory in this Notice.
The live inventory may change as providers or configurations change. It is the current source for providers active on a covered surface.
Some providers may process information across websites or services under their own notices. After the required choice, eligible website activity and transaction signals that may indicate a health interest may be disclosed for advertising or affiliate measurement, campaign optimization, or targeted advertising where permitted. CONNEQT does not authorize providers to receive device readings, app health records, reports, assessments, prescription or eligibility information, contact information, account or profile content, or support content for those purposes.
A platform-native lead form is not website tracking. If you use such a form to request a CONNEQT educational program, the platform processes the information you submit under its own notice and provides CONNEQT with your name, email address, and program request. HubSpot processes the signup as CONNEQT's customer-relationship and communications service provider so we can deliver the requested guide or email series and related marketing described on the form. CONNEQT does not ask or authorize the platform form to collect diagnoses, medication use, family medical history, reproductive or pregnancy information, readings, symptoms, or other health-status details.
8. Your choices
Use the Privacy choices section of this Notice to review or change your categories. Withdrawing Partner measurement stops future eligible disclosures governed by that choice but does not necessarily disable detailed first-party analytics permitted by a separate Site insights choice. Withdrawing Site insights stops future optional detailed analytics collection and causes CONNEQT's pseudonymous first-party attribution identifiers and related visitor and touch records to be removed. It does not remove aggregate reports that do not identify a visitor or device.
For Washington consumers, withdrawing the collection choice also stops future covered cookie-free aggregate collection. Withdrawing the separate sharing choice stops future covered disclosure. Withdrawal does not affect processing that occurred before withdrawal.
Browser settings may also block or delete technologies, but doing so can affect necessary website functions and may not communicate a legally recognized opt-out to every website.
CONNEQT processes recognized browser-based opt-out signals, including Global Privacy Control, as required by applicable law. A recognized signal is applied to covered external sale, sharing, targeted-advertising, and advertising-event activity for the browser or device in which it is received. It does not opt the visitor into optional Site insights or Partner measurement and does not replace affirmative consumer-health consent where required.
CONNEQT does not currently respond to a legacy browser Do Not Track signal as if it were a Global Privacy Control signal. There is no uniform industry standard for legacy Do Not Track signals. We process Global Privacy Control and other legally recognized signals as described above.
Choices are generally browser- and device-specific. You may need to repeat them after clearing cookies, using a different browser or device, or when a consent record expires.
9. Changes
We may update this Notice and the live inventory when our websites, technologies, or legal obligations change. A new optional purpose or materially different tracking practice will not be enabled without any notice or choice required by applicable law.
10. Contact
For privacy questions, contact hello@conneqthealth.com with the subject Privacy Request.