Skip to content
← Back

Cookie Policy

Version 3

Service availability: UpLiftRX is not currently accepting patient intake or medication orders. This document remains available for reference and does not indicate that clinical, pharmacy, laboratory, or fulfillment services are active.

Last updated: August 9, 2026

This policy explains how UpliftRX LLC ("UpLiftRx," "we," "us") uses cookies and similar technologies on upliftrx.co and in our patient portal, and what choices you have. It supplements our Notice of Privacy Practices and forms part of our Terms of Service.

The short version

We use only essential cookies. We do not run advertising cookies, social-media pixels, session-replay tools, or cross-site trackers — on any page, marketing pages included. We do not sell or share your information for advertising, and we do not allow third parties to collect information about you across other websites through our site.

What cookies are

A cookie is a small text file a website stores on your device. Similar technologies include localStorage and sessionStorage (browser storage that works like a cookie), pixels and web beacons (tiny images that report that a page or email was opened), and SDKs inside mobile apps. This policy covers all of them.

What we set

TechnologyTypePurposeLifetime
Supabase auth cookies (sb-*)Essential cookieKeeps you securely signed in and protects your sessionSession / refresh window
CSRF and security tokensEssential cookieProtects forms and requests against cross-site attacksSession
uplift_cookie_ack_v1localStorageRemembers that you have seen this notice so we stop showing itPersistent until cleared
uplift_sklocalStorageAnonymous, randomly generated funnel identifier used to count steps completed — never linked to your name, account, or health informationPersistent until cleared
uplift_onboarding_draftHttpOnly first-party cookieHolds only a random key for an encrypted, server-side in-progress questionnaire; health answers are not stored in browser storage24 hours
Push notification tokenMobile app storageDelivers portal notifications if you enable themUntil you disable notifications

Essential technologies are used to operate the site and to deliver the service you asked for. Under most privacy laws they do not require consent, but we disclose them anyway.

What we deliberately do not do

  • No third-party analytics or advertising tags. No Google Analytics, no Meta Pixel, no TikTok pixel, no LinkedIn Insight tag, no advertising retargeting — anywhere on the site, including marketing and blog pages.
  • No tracking technologies on health-related pages. Federal guidance from HHS/OCR restricts the use of third-party tracking on pages that can reveal that someone is seeking care. We go further and exclude third-party tracking from the entire site.
  • No selling or sharing of personal information for advertising, and no cross-context behavioral advertising.
  • No fingerprinting, and no attempt to identify you across devices or sites.
  • No session replay or keystroke recording.

How we measure our own site

We measure our funnel with a first-party system that records a short list of whitelisted event names — for example, "checkout started." Those events contain no health answers, no names, no email addresses, and no IP addresses, and they are associated only with the anonymous identifier described above. We use the results to understand where our own site is confusing, not to build a profile of you.

Email

Our transactional emails — order confirmations, shipping updates, appointment reminders, portal notifications — do not contain tracking pixels. If you separately opt in to marketing email, those messages may report whether the message was opened and whether a link was clicked, so that we can stop sending to people who do not want it. You may unsubscribe from marketing email at any time using the link in the message, without affecting your care or your transactional messages.

Your choices

  • Browser controls. You can block or delete cookies in your browser settings and clear localStorage at any time. Blocking essential cookies will prevent sign-in and secure questionnaire resume from working. In-progress questionnaires expire automatically after 24 hours.
  • Global Privacy Control. We honor the GPC browser signal. Because we do not sell or share personal information or serve targeted advertising, there is nothing for the signal to switch off, but we treat it as a valid opt-out request where applicable law requires.
  • Do Not Track. There is no common industry standard for responding to DNT headers. Our practices are the same whether or not you send one.
  • Mobile. You can disable push notifications in your device settings or in Account → Profile.

Service providers

The essential technologies above are supported by vendors who host and secure the platform — for example, our application host, database provider, and payment processor. They act on our instructions under written contracts, including HIPAA business associate agreements where they handle protected health information, and they are not permitted to use your information for their own purposes or for advertising.

Changes

We will update this policy if our practices change and will revise the "Last updated" date above. If we ever introduce a non-essential technology, we will ask for your consent first.

Questions

privacy@upliftrx.co · legal@upliftrx.co UpliftRX LLC, 8 The GRN, STE R, Dover, DE 19901