Cookie Policy
Last updated: October 22, 2026
How Carthalis uses cookies and similar technologies on carthalis.ca — and how you stay in control.
Common questions
Introduction
Carthalis ("we", "our", or "us") uses cookies and similar technologies on our website. This Cookie Policy explains how we use these technologies, what types we use, and how you can control them.
What Are Cookies?
Cookies are small text files that are stored on your device when you visit a website. They help the website recognize your device and remember certain information about your visit. Cookies are widely used to make websites work more efficiently and provide valuable information to website owners.
Categories of Cookies We Use
We use the following categories of cookies on our website:
1. Essential (Necessary) Cookies
These cookies are necessary for the website to function properly. They enable basic functions like page navigation, secure areas access, and remembering your preferences. The website cannot function properly without these cookies, and they can only be disabled by changing your browser settings.
2. Analytics Cookies
Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. This helps us improve our website's structure, content, and user experience.
3. Advertising measurement
If you choose website analytics, the Reddit Pixel records page visits on the public website. If that same browser later creates an account or finishes onboarding, it records those two events as well. It does not record visits inside the signed-in product, and we do not send health information or email addresses to Reddit. We do not sell your data.
Specific Cookies We Use
| Cookie Name | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| _auth | Carthalis | Authentication | Session | Essential |
| _auth_refresh | Carthalis | Session refresh | 1 month | Essential |
| carthalis_marketing_analytics_consent_v1 (local storage) | Carthalis | Stores your website analytics choice | Until changed or browser data is cleared | Essential |
| _ga | Google Analytics | Analytics | 2 years | Analytics |
| _gid | Google Analytics | Analytics | 24 hours | Analytics |
| _rdt_uuid | Measures public-website visits, account creation, and finished onboarding | 90 days | Advertising | |
| ph_* | PostHog | Authenticated product analytics | Varies by configuration | Product analytics |
Google Analytics
If you choose website analytics, we use Google Analytics to understand how visitors use our public website. It is not loaded in the authenticated product, onboarding, or OAuth-return pages. Google's privacy policy is available at: https://policies.google.com/privacy
Reddit Pixel
If you choose website analytics, we use the Reddit Pixel to measure visits to the public website, including visits that come from Reddit ads. The same choice also covers an account-created event and an onboarding-finished event. Those events contain no health information, email address, or phone number. Reddit's privacy policy is available at: https://www.reddit.com/policies/privacy-policy
Product Analytics
After accepting the Terms and Privacy Policy during onboarding, authenticated users' product interactions are measured with PostHog. PostHog receives only a pseudonymous account identifier and allowlisted product events. It does not receive health data, form answers, free text, email addresses, or tokens. OAuth callback URLs are never sent as automatic page views.
Managing Your Cookie Preferences
You can choose whether to allow Google Analytics and the Reddit Pixel when you first visit the public website. Browser controls can also remove or block stored cookies.
Browser Controls
Most web browsers allow control of cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit:
Legal Basis for Processing
Where we process your personal data through cookies and similar technologies:
- For essential cookies: Our legitimate interest in providing a functional website and services
- For Google Analytics and the Reddit Pixel on the public website: Your explicit consent
Data Transfer
Information collected through cookies may be transferred to and stored in countries outside your residence. We ensure appropriate safeguards are in place to protect your information when transferred internationally.
Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of your personal data
- Request deletion of your personal data
- Object to our use of your personal data
- Request restriction of processing your personal data
- Request transfer of your personal data
- Withdraw consent
Changes to This Cookie Policy
We may update this Cookie Policy from time to time to reflect changes in technology, regulation, or our business practices. Any changes will be posted on this page with an updated revision date.
Contact Us
If you have any questions about our use of cookies or this Cookie Policy, please contact us.