1. What Are Cookies?

1.1 Definition

Cookies are small text files that are placed on your device (computer, smartphone, tablet, or other electronic device) when you visit a website or use an application. Cookies contain information that is transferred to your device's hard drive and stored by your web browser.

1.2 Purpose

Cookies are widely used to make websites and applications work more efficiently and provide a better user experience. They help websites remember your actions and preferences (such as login credentials, language selection, font size, and other display preferences) over a period of time, so you don't have to keep re-entering them.

1.3 Cookie Lifespan

Cookies can be:

• Session Cookies: Temporary cookies that expire when you close your browser or app. They are used to remember your actions during a single browsing session.
• Persistent Cookies: Cookies that remain on your device for a set period of time (ranging from a few days to several years) or until you manually delete them. They are used to remember your preferences across multiple sessions.

1.4 Similar Technologies

In addition to cookies, we use similar tracking technologies, including:

• Web Beacons (Pixels): Small graphic images embedded in web pages or emails that track whether you have viewed a particular page or email
• Local Storage: HTML5 local storage and session storage that allow websites to store data locally on your device
• SDKs (Software Development Kits): Code libraries integrated into mobile apps to collect usage data and enable features
• Device Fingerprinting: Techniques that collect information about your device configuration to create a unique identifier
• Mobile Identifiers: Advertising IDs (IDFA on iOS, AAID on Android) used for app tracking and advertising

Throughout this Cookie Policy, references to "cookies" include these similar technologies unless otherwise specified.

2. Why We Use Cookies

We use cookies and similar technologies for several important purposes:

2.1 Authentication and Security

• User Login: Enable core features of the Service that you request (logging in, account management, saving preferences)
• Session Management: Maintain your session and remember you as you navigate through the Service
• Security Features: Provide security features and detect malicious activity
• CSRF Protection: Prevent cross-site request forgery attacks

2.2 Personalization

• User Preferences: Remember your preferences and settings (language, timezone, units, theme)
• Custom Content: Customize content and recommendations based on your interests and usage patterns
• AI Coaching: Provide personalized AI coaching and insights
• Dashboard Layout: Remember your preferred dashboard configuration
• Recent Items: Store your recently used foods, workouts, or recipes for quick access

2.3 Performance and Analytics

• Usage Tracking: Understand how users interact with the Service
• Feature Analysis: Identify popular features and areas for improvement
• Content Effectiveness: Measure the effectiveness of our content and features
• Error Detection: Detect and troubleshoot errors and performance issues
• A/B Testing: Test new features with different user groups

2.4 Advertising and Marketing

• Ad Targeting: Display relevant advertisements on our Service and third-party platforms
• Campaign Measurement: Measure the effectiveness of advertising campaigns
• Frequency Capping: Limit the number of times you see the same advertisement
• Interest Profiling: Understand your interests to show you more relevant ads
• Conversion Tracking: Track sign-ups and subscriptions from advertising campaigns
• Retargeting: Show ads to users who visited but didn't sign up

2.5 Social Media and Sharing

• Content Sharing: Enable you to share content on social media platforms
• Social Feeds: Show you content from social media feeds within the Service
• Social Login: Allow you to sign in using social media accounts
• Platform Tracking: Allow social media platforms to track your activity for their own purposes

3. Types of Cookies We Use

We use different types of cookies, each serving specific purposes:

3.1 Strictly Necessary (Essential) Cookies

Purpose: These cookies are essential for the Service to function properly. Without these cookies, services you have requested cannot be provided.

What they do:

• Authenticate your identity and maintain your login session
• Enable core features such as food logging, workout tracking, and data synchronization
• Provide security features and prevent fraud
• Balance server load and ensure Service availability
• Remember your cookie consent preferences

Can you disable them? No These cookies are required for the Service to work. If you disable them, you will not be able to use the Service.

Examples:

• session_id Maintains your active session
• auth_token Authenticates your login
• CSRF_token Prevents cross-site request forgery attacks
• load_balancer Distributes traffic across servers
• cookie_consent Remembers your cookie preferences

3.2 Functional (Preference) Cookies

Purpose: These cookies enhance the functionality and personalization of the Service by remembering your choices and preferences.

What they do:

• Remember your language, timezone, and unit system preferences (metric vs. imperial)
• Recall recently viewed foods, workouts, and recipes
• Save your theme preference (light mode vs. dark mode)
• Remember your privacy settings and display preferences
• Store your recently used foods and workouts for quick access

Can you disable them? Yes, but with impact You can disable these cookies, but doing so may impact your user experience. You will need to re-enter your preferences each time you visit.

Examples:

• user_preferences Stores your display and feature preferences
• recent_items Remembers recently viewed or logged items
• theme_preference Stores your light/dark mode preference
• timezone Remembers your timezone setting
• unit_system Stores your metric/imperial preference

3.3 Performance and Analytics Cookies

Purpose: These cookies collect information about how you use the Service. All information collected by these cookies is aggregated and anonymized.

What they do:

• Track which pages and features you visit
• Measure how long you spend on different parts of the Service
• Identify errors, bugs, and performance issues
• Understand user flows and navigation patterns
• Monitor Service performance and uptime
• Conduct A/B testing to improve features

Can you disable them? Yes These cookies do not directly identify you. Disabling them will not affect the functionality of the Service, but it will help us improve the user experience.

Examples:

• _ga Google Analytics cookie to distinguish unique users
• _gid Google Analytics cookie for session information
• analytics_session Tracks session duration and interactions
• ab_test_variant Assigns you to A/B test groups
• performance_metrics Measures page load times and errors

Third-Party Analytics Providers:

• Google Analytics: Web and app analytics (Privacy Policy)
• Firebase Analytics: Mobile app analytics (Privacy Policy)
• Mixpanel / Amplitude: Product analytics (Privacy Policy)
• Sentry: Error tracking and performance monitoring (Privacy Policy)

3.4 Advertising and Marketing Cookies

Purpose: These cookies track your activity across websites and apps to build a profile of your interests and show you personalized advertisements.

What they do:

• Display personalized advertisements based on your browsing behavior
• Measure the effectiveness of advertising campaigns
• Track conversions (e.g., whether you signed up after clicking an ad)
• Limit the frequency of ads you see (frequency capping)
• Show you retargeting ads after you visit our website or app

Can you disable them? Yes You can opt out of personalized advertising through your device settings, browser settings, or third-party opt-out tools. You will still see ads, but they will be less relevant to your interests.

Examples:

• _fbp Facebook Pixel cookie for ad performance tracking
• _gcl_au Google Ads cookie for conversion tracking
• ads_preferences Stores your advertising preferences
• remarketing_id Identifies you for retargeting campaigns
• attribution_token Tracks which ads led to conversions

Third-Party Advertising Providers:

• Google Ads: Display and search advertising (Privacy Policy)
• Facebook / Instagram Ads (Meta): Social media advertising (Privacy Policy)
• Twitter Ads: Social media advertising (Privacy Policy)
• TikTok Ads: Social media advertising (Privacy Policy)
• Advertising Exchanges and Networks: Various third-party ad networks

3.5 Social Media Cookies

Purpose: These cookies enable social media features and allow social media platforms to track your activity across websites for their own advertising and analytics purposes.

What they do:

• Enable you to share content on social media platforms (Facebook, Twitter, Instagram, etc.)
• Display social media feeds or widgets within the Service
• Allow you to sign in to the Service using your social media account
• Track your interactions with social media content for analytics purposes

Can you disable them? Yes You can disable these cookies, but social media features and sharing options may not work properly.

Examples:

• fr Facebook cookie for advertising and analytics
• _twitter_sess Twitter session cookie
• ig_cb Instagram cookie for functionality
• social_share_token Enables sharing content on social media

Third-Party Social Media Platforms:

• Facebook / Meta: Privacy Policy
• Instagram: Privacy Policy
• Twitter: Privacy Policy
• LinkedIn: Privacy Policy
• TikTok: Privacy Policy
• Pinterest: Privacy Policy

4. First-Party vs. Third-Party Cookies

4.1 First-Party Cookies

First-party cookies are set directly by Glewell when you visit our website or use our app. These cookies are created by our domain (glewell.com) and can only be read by our servers.

Examples of First-Party Cookies:

• Session cookies for login and authentication
• User preference cookies (language, theme, timezone)
• Analytics cookies set by us (not Google Analytics)

Control: We have full control over first-party cookies and use them primarily for essential functionality and improving your experience.

4.2 Third-Party Cookies

Third-party cookies are set by external services that we integrate into the Service. These cookies are created by domains other than glewell.com and can be read by those third parties across multiple websites.

Examples of Third-Party Cookies:

• Google Analytics cookies (set by google.com)
• Facebook Pixel cookies (set by facebook.com)
• Advertising network cookies (set by ad tech companies)
• Social media cookies (set by social media platforms)

Control: Third-party cookies are controlled by external companies according to their own privacy policies. We work with reputable partners, but we cannot control their data practices.

5. Detailed Cookie List

Below is a comprehensive list of all cookies used by Glewell, categorized by type:

5.1 Essential Cookies

5.2 Functional Cookies

5.3 Analytics and Performance Cookies

Third-Party Analytics Providers:

• Google Analytics: Privacy Policy
• Firebase Analytics: Privacy Policy
• Mixpanel / Amplitude: Privacy Policy
• Sentry: Privacy Policy

6. Other Tracking Technologies

In addition to cookies, we use other tracking technologies:

6.1 Web Beacons (Pixels)

What They Are: Tiny transparent images embedded in web pages or emails that track whether you have viewed a particular page or email.

Purpose: Track email opens, page views, and ad impressions.

Examples: Facebook Pixel, Google Analytics tracking pixel.

6.2 Local Storage

What It Is: HTML5 local storage that persists data in your browser.

Purpose: Store larger amounts of data for offline functionality and cached data.

Management: Cleared when you clear browser storage or through browser settings.

6.3 Session Storage

What It Is: Temporary storage that lasts for the browser session.

Purpose: Store temporary data like form inputs.

Duration: Deleted when you close the browser tab.

6.4 Device Fingerprinting

What It Is: Collecting device characteristics (browser version, screen size, installed fonts, etc.) to create a unique identifier.

Purpose: Fraud prevention, security, analytics.

Note: We use minimal fingerprinting only for security purposes, not for tracking.

6.5 SDKs (Software Development Kits)

What They Are: Third-party code integrated into our mobile app.

Purpose: Analytics, crash reporting, push notifications.

Examples: Firebase Analytics, Crashlytics, OneSignal.

7. How to Manage and Control Cookies

7.1 Browser Controls

You can manage cookies directly through your web browser settings:

Google Chrome:

1. Click the three-dot menu (â‹®) in the top right
2. Go to Settings > Privacy and security > Cookies and other site data
3. Choose: Allow all cookies, Block third-party cookies, or Block all cookies
4. Click "See all site data and permissions" to view and delete specific cookies

Mozilla Firefox:

1. Click the menu button (☰) and select Settings
2. Go to Privacy & Security
3. Under "Cookies and Site Data," click "Manage Data"
4. Search for "glewell.com" and remove cookies
5. Adjust Enhanced Tracking Protection settings as desired

Safari (Mac):

1. Open Safari and go to Preferences
2. Click the Privacy tab
3. Click "Manage Website Data"
4. Search for "glewell.com" and click "Remove"
5. Enable "Prevent cross-site tracking" to block third-party cookies

Microsoft Edge:

1. Click the three-dot menu (•••) and select Settings
2. Go to Privacy, search, and services
3. Under "Tracking prevention," choose a level (Basic, Balanced, Strict)
4. Under "Cookies and site permissions," click "Manage and delete cookies and site data"

7.2 Mobile Devices

iOS (iPhone/iPad):

1. Go to Settings > Safari
2. Scroll down to "Privacy & Security"
3. Toggle "Block All Cookies" or "Prevent Cross-Site Tracking"
4. Tap "Advanced > Website Data" to view and remove specific cookies

Android:

1. Open Chrome and tap the three-dot menu (â‹®)
2. Go to Settings > Site settings > Cookies
3. Toggle "Cookies" on or off
4. Select "Block third-party cookies" if desired

7.3 Third-Party Opt-Out Tools

You can opt-out of personalized advertising through these tools:

• NAI Opt-Out: Network Advertising Initiative
• DAA Opt-Out: Digital Advertising Alliance
• EDAA Opt-Out (EU): Your Online Choices
• Google Ads Settings: Manage Google Ad Preferences
• Facebook Ad Preferences: Facebook Settings
• Google Analytics Opt-Out: Browser Add-On

7.4 Do Not Track (DNT)

Some browsers offer a "Do Not Track" (DNT) feature that sends a signal to websites requesting they do not track your activity.

Our Response to DNT: Currently, there is no industry-wide standard for responding to DNT signals. We do not alter our data collection practices in response to DNT signals at this time. However, you can use the other cookie control methods described above to limit tracking.

7.5 Cookie Preferences in Our Service

We provide in-app cookie preference controls where you can:

• Accept or reject optional cookies (functional, analytics, advertising)
• Manage third-party cookies
• Update your preferences at any time

To access cookie preferences:

1. Visit your account settings
2. Navigate to "Privacy Settings" or "Cookie Preferences"
3. Toggle cookie categories on or off
4. Click "Save Preferences"

8. Cookie Consent and Preferences

8.1 Cookie Consent Banner

When you first visit our website or app, we display a cookie consent banner that explains our use of cookies and asks for your consent.

You can:

• Accept all cookies Consent to all cookie types
• Reject optional cookies Only essential cookies will be used
• Customize your preferences Choose which cookie categories to allow

8.2 Consent Requirements

Based on applicable privacy laws (GDPR, ePrivacy Directive, CCPA), we obtain your consent before placing optional cookies on your device, except for:

• Strictly necessary cookies (required for the Service to function)
• Cookies exempt from consent requirements under applicable law

8.3 Granular Consent

We offer granular consent options, allowing you to:

• Accept or reject specific cookie categories
• Choose which third-party services to allow
• Change your mind at any time

8.4 Withdrawing Consent

You can withdraw your cookie consent at any time by:

• Visiting your cookie preferences in account settings
• Deleting cookies through your browser settings
• Using third-party opt-out tools

Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Impact of Disabling Cookies

9.1 Essential Cookies

If you disable essential cookies:

• You will not be able to log in or create an account
• Core features like food logging, workout tracking, and data sync will not work
• Security features will be impaired
• You will not be able to use the Service

Recommendation: Do not disable essential cookies if you want to use the Service.

9.2 Functional Cookies

If you disable functional cookies:

•   You will need to re-enter your preferences each time you visit
•   Your theme, language, and unit settings will not be saved
•   Recently used items and shortcuts will not be available
•   The Service will still work, but will be less personalized and convenient

Recommendation: Enable functional cookies for a better user experience.

9.3 Analytics and Performance Cookies

If you disable analytics cookies:

• The Service will function normally
• ℹ We will not be able to measure how you use the Service or identify areas for improvement
• ℹ You will still be included in aggregated analytics (if collected through other means)

Recommendation: Enable analytics cookies to help us improve the Service (optional).

9.4 Advertising and Marketing Cookies

If you disable advertising cookies:

• The Service will function normally
• You may still see ads, but they will be less relevant to your interests (generic ads)
• ℹ You may see the same ad more frequently (no frequency capping)
• ℹ We will not be able to measure ad performance as effectively

Recommendation: Disable advertising cookies if you prefer not to see personalized ads (optional).

10. Updates to This Cookie Policy

10.1 Changes to This Policy

We may update this Cookie Policy from time to time to reflect:

• Changes in the cookies we use
• New features or functionality requiring additional cookies
• Changes in cookie regulations or best practices
• Updates to third-party services we integrate with

10.2 How We Notify You

When we make material changes:

• We'll update the "Last Updated" date at the top of this policy
• We'll notify you via email (for significant changes)
• We'll display a notification banner in the Service

10.3 Reviewing Changes

We encourage you to review this Cookie Policy periodically to stay informed about our cookie practices. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us About Cookies

If you have questions or concerns about our use of cookies, please contact us:

11.1 Your Rights

Depending on your location, you have rights regarding cookies and tracking:

• Right to Object: Object to the use of non-essential cookies
• Right to Withdraw Consent: Withdraw cookie consent at any time
• Right to Data Access: Request information about data collected via cookies
• Right to Deletion: Request deletion of data collected via cookies (where applicable)

To exercise these rights, use our Cookie Preference Center or contact privacy@glewell.com.

Summary: Cookie Types at a Glance

Quick Links

• Privacy Policy
• Terms of Service
• Manage Cookie Preferences (requires login)
• Google Analytics Opt-Out
• NAI Opt-Out Tool
• DAA Opt-Out Tool
• Facebook Ad Preferences
• Google Ads Settings