Legal · Cookies
Cookie Policy
Exactly which cookies, pixels, and scripts run on this site, what they do, how long they last, and how to turn the optional ones off.
Last updated · August 13, 2026
Plain-language summary
Only strictly-necessary cookies run before you choose. Analytics loads only if you allow it. We do not place advertising or social-media pixels on health-related pages or anywhere inside authenticated products, and we honor Global Privacy Control browser signals automatically.
01
What these technologies are
“Cookies” is shorthand for several technologies that store or read information on your device:
- Cookies — small text files set by this site (first-party) or by a vendor whose script we load (third-party).
- Local and session storage — browser storage we use to remember your cookie choice and interface state.
- Pixels, tags, and beacons — a one-by-one image or script that reports a page view or event to a vendor.
- SDKs and session-replay tools — code that records interactions. We do not run session-replay tooling.
02
Categories we use
Strictly necessary — always on
Session continuity, security and abuse prevention, request routing, and storing your cookie choice. These are first-party and cannot be switched off, because the site cannot function without them. No consent is required for this category.
Functional — optional
Remembers interface preferences and previously entered form details so you do not have to re-enter them. Not used for advertising or profiling.
Analytics — optional, off by default
Aggregate measurement of which pages are read and which links are used, so we can improve documentation and navigation. The analytics script is not downloaded and no measurement identifier is created until you opt in.
Advertising — optional, off by default
Campaign measurement only. We do not build advertising audiences from health-related browsing, and we do not permit advertising tags on authenticated product surfaces.
03
Cookies and tags in use
| Name / vendor | Category | Purpose | Duration |
|---|---|---|---|
| moh_consent_v1 (first party, local storage) | Strictly necessary | Stores your cookie choices and the timestamp of that decision. | Until cleared |
| Session / load-balancing cookies (first party) | Strictly necessary | Keeps your session on a consistent server and protects against forged requests. | Session |
| Interface preference storage (first party) | Functional | Remembers layout and form state between visits. | Up to 12 months |
| Google Analytics 4 — _ga, _ga_*, gtag.js (Google LLC, US) | Analytics | Aggregate page and event measurement with IP anonymization. Runs in Google Consent Mode: cookieless, identifier-free pings until you opt in; the _ga cookies are only written after you allow analytics. | _ga up to 24 months; _ga_* up to 24 months |
| Campaign measurement parameters (first party) | Advertising | Attributes an inbound visit to a marketing campaign. Loaded only after opt-in. | Up to 90 days |
This table is maintained as our tag set changes. If you find a cookie on this site that is not listed here, tell us at privacy@myorbithealth.com and we will correct the record.
04
Tracking on health-related pages
Tracking technology on health websites carries specific legal risk, and we treat it accordingly. We do not deploy advertising or social-media pixels (for example, Meta Pixel or TikTok Pixel), nor session-replay tooling, on any page where the fact of your visit could reveal a health condition, treatment interest, or a relationship with a provider.
Authenticated product surfaces — the patient, brand, and provider portals — carry only strictly-necessary and functional first-party technology. Third-party analytics and advertising tags are not permitted there, consistent with U.S. Department of Health and Human Services guidance on online tracking technologies and our Business Associate obligations to partner clinics.
05
Global Privacy Control and opt-out signals
If your browser or extension sends a Global Privacy Control signal, we read it on arrival and record an opt-out of analytics and advertising for you automatically — without showing a banner and without requiring you to click anything. We treat that signal as a valid request not to sell or share personal information, and as an opt-out preference signal under California, Colorado, Connecticut, and comparable state law.
Browser-level “Do Not Track” headers are not a recognized standard and are not, by themselves, treated as an opt-out; Global Privacy Control is.
06
How to change or withdraw your choices
- Use the control, available here and in the site footer, at any time. Withdrawing consent takes effect immediately for future page loads.
- Clear cookies and site data in your browser settings, which resets your choice and re-prompts you.
- Enable Global Privacy Control in a supporting browser or extension to opt out across sites.
- Use Google's own opt-out browser add-on to block Google Analytics measurement everywhere.
Withdrawing consent does not remove measurement already collected while consent was active. To request deletion of that data, use the rights process in our Privacy Policy.
07
Contact
Questions about cookies or tracking on this site: privacy@myorbithealth.com.