Cookie policy | Everfur

Last updated: June 22, 2026. Effective: July 22, 2026.

1. Introduction

This Cookie Policy ("Policy") explains how Strand Health Inc., doing business as Everfur ("Company," "we," "us," or "our"), uses cookies and similar tracking technologies on our website at everfur.com, shop.everfur.com, my.everfur.com, clinic.everfur.com, and all related web based interfaces (collectively, the "Website"). This Policy also describes the use of similar technologies (such as SDKs, local storage, and session storage) within our mobile applications (iOS and Android). By continuing to browse or use our Website or mobile applications, you acknowledge that you have read, understood, and agree to the use of cookies and similar technologies as described in this Policy.

This Policy supplements, but does not replace, our Privacy Policy. For comprehensive information about our data practices, please refer to everfur.com/privacy.

2. What Are Cookies

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit a website. They are widely used to make websites work more efficiently, to provide information to website operators, and to enable certain features and functionality. "First party cookies" are set by the website you are visiting. "Third party cookies" are set by other domains whose content or services are integrated into the website. Cookies may be "session cookies" (which expire when you close your browser) or "persistent cookies" (which remain on your device for a specified period or until you delete them).

3. Types of Cookies We Use

3.1 Strictly Necessary Cookies

These cookies are essential for the operation of our Website and Services. They enable core functionality such as security, session management, authentication, CSRF (Cross Site Request Forgery) protection, shopping cart persistence, checkout processing, load balancing, network management, and accessibility. You cannot opt out of these cookies because the Website and Services cannot function properly without them. Disabling these cookies may render the Website unusable.

Examples include: session authentication tokens that maintain your login state; CSRF protection tokens that prevent unauthorized form submissions; shopping cart state cookies that preserve your Marketplace cart across page loads; and load balancing cookies that distribute traffic across servers.

3.2 Performance and Analytics Cookies

These cookies collect information about how visitors use our Website, such as which pages are visited most often, how visitors navigate between pages, page load times, whether visitors encounter errors, conversion funnel completion rates, and aggregate usage patterns. We use this information to improve the performance, functionality, and user experience of our Website and Services.

Analytics tools we use may include PostHog, Firebase Analytics, and similar services. Information collected by performance and analytics cookies is aggregated and pseudonymized where possible. These cookies do not collect personally identifiable information unless you are logged in to your account, in which case usage data may be associated with your account for the purpose of providing personalized analytics (such as feature usage history) within the Services.

3.3 Functional Cookies

These cookies allow our Website to remember choices you make (such as your language, region, currency display, login status, or display preferences) and provide enhanced, more personalized features. Functional cookies may also support features such as remembering your recently viewed products, maintaining your preferred shipping address, preserving your notification preferences, and remembering your cookie consent choices.

3.4 E-Commerce Cookies

When you interact with the Everfur Marketplace, we use cookies and similar technologies to: maintain your shopping cart across sessions and page loads; remember your shipping and billing preferences; track your order status within a session; support the multi step checkout process; enable wishlist and saved item features; and remember your recently viewed products. These cookies are classified as either strictly necessary (cart, checkout) or functional (preferences, wishlists) as described above.

3.5 Targeting and Advertising Cookies

We do not currently use targeting or advertising cookies on our Website. We do not serve third party display advertisements on our Website or within our Applications. We do not use third party advertising cookies, retargeting pixels, or tracking technologies for cross context behavioral advertising. We do not participate in ad exchanges, real time bidding, header bidding, or similar programmatic advertising auction systems. We do not allow third party advertisers to place cookies on our Services.

If this changes in the future, we will update this Policy, provide at least thirty (30) days' advance notice, and implement consent mechanisms as required by applicable law (including cookie consent banners, preference centers, and opt out mechanisms).

4. Similar Technologies

In addition to cookies, we may use the following similar technologies:

Local Storage (Web Storage API). Used to store data on your browser between sessions, including user preferences, cached application data, and interface state. Unlike cookies, local storage data is not sent to the server with every HTTP request. Local storage capacity is typically 5MB to 10MB per domain.

Session Storage. Used to store data for the duration of a single browser session (tab), such as temporary cart state, form input preservation, and navigation state. Session storage data is automatically cleared when the tab or browser window is closed.

Pixel Tags (Web Beacons). Small transparent images (typically 1x1 pixel, also called "clear GIFs" or "tracking pixels") embedded in web pages or HTML emails that allow us to determine whether a page has been viewed or an email has been opened. We use pixel tags in transactional emails (such as order confirmations, shipping notifications, and prescription status updates) to measure email delivery, open rates, and click through rates for the purpose of monitoring email deliverability and improving communication effectiveness.

Mobile SDKs. Our mobile applications incorporate software development kits (SDKs) from analytics, crash reporting, and performance monitoring providers. These SDKs perform functions similar to cookies in the web context, including collecting device identifiers, session data, crash reports, performance metrics, and usage analytics. SDKs embedded in our applications include (but may not be limited to): PostHog SDK for product analytics; Firebase/Crashlytics SDK for crash reporting and performance monitoring; and Expo SDK modules for application functionality.

Meta Business SDK (Attribution). We may integrate the Meta (Facebook) Business SDK for install attribution and conversion measurement in connection with our paid advertising campaigns on Meta platforms. This SDK may collect device identifiers (IDFA on iOS with your App Tracking Transparency consent, and Android Advertising ID) and app event data for the purpose of measuring advertising campaign effectiveness and attributing app installs to specific ad campaigns. This SDK does not enable cross context behavioral advertising within our Services. You can control Meta's data collection through: your iOS App Tracking Transparency settings (you will be prompted before tracking is enabled); your Android advertising settings; and your Meta account privacy settings.

Fingerprinting. We do not use browser fingerprinting, canvas fingerprinting, WebGL fingerprinting, audio fingerprinting, device fingerprinting, or any other fingerprinting technique to identify or track users across websites, sessions, or devices.

5. Cookies Used by Third Party Services

Our Website and Services integrate with certain third party services that may set their own cookies or use similar technologies within the context of our Website or Services. These third party services include:

Payment Processors (Stripe, Apple Pay, Google Pay). Payment processors set cookies and use similar technologies as necessary to process transactions securely, prevent payment fraud, comply with PCI DSS requirements, and perform their payment processing functions.

Analytics Services (PostHog, Firebase). Analytics services set cookies and use SDKs to measure website and application usage. PostHog is our primary analytics platform and may set cookies for session identification and event tracking.

Authentication Providers (Apple, Google). If you use Apple Sign In or Google Sign In, the authentication provider may set cookies to manage your authentication session and token state.

Content Delivery Networks. CDN providers may set cookies for load balancing, edge caching, and DDoS protection purposes.

We do not control the cookies set by third party services, and their cookie practices are governed by their own privacy and cookie policies. We recommend reviewing the privacy and cookie policies of these third party services for detailed information about their data practices.

6. Your Choices

You can control and manage cookies in several ways:

Browser Settings. Most web browsers allow you to control cookies through their settings. You can typically configure your browser to: accept all cookies; reject all cookies; accept only first party cookies and reject third party cookies; alert you when a cookie is being set; or delete existing cookies. Note that disabling or rejecting cookies may affect the functionality of our Website, including the inability to complete purchases, maintain a shopping cart across sessions, or remain logged in.

Mobile Device Settings. You can control analytics and tracking on mobile devices through your operating system privacy settings, including: Limit Ad Tracking and App Tracking Transparency on iOS; Opt Out of Ads Personalization on Android; and per app permissions for data access.

Cookie Consent Banner. Where required by applicable law (including the EU ePrivacy Directive, GDPR, UK PECR, and comparable regulations), we display a cookie consent banner that allows you to accept or reject non essential cookies before they are set on your device. Your consent preferences are stored in a cookie to remember your choices for future visits.

Global Privacy Control (GPC). We honor Global Privacy Control (GPC) signals where required by applicable law, including under the CCPA/CPRA. When we detect a GPC signal, we treat it as a valid opt out request.

Opt Out Links. For specific third party analytics services, you may opt out through their respective mechanisms. For example, you can opt out of Google Analytics by installing the Google Analytics Opt Out Browser Add on.

7. Cookie Retention

Session cookies are deleted when you close your browser. Persistent cookies remain on your device for the period specified in the cookie or until you delete them manually. Specific retention periods for our cookies:

Authentication cookies: duration of your login session, or up to thirty (30) days for "remember me" sessions. Analytics cookies: up to twenty four (24) months. Functional and preference cookies: up to twelve (12) months. Cookie consent cookies: up to twelve (12) months. Cart and e-commerce cookies: up to thirty (30) days.

8. International Cookie Law Compliance

We are committed to complying with applicable cookie and tracking technology laws in the jurisdictions where our Website is accessible, including the EU ePrivacy Directive (as implemented in member state law), the UK Privacy and Electronic Communications Regulations (PECR), and applicable U.S. state privacy laws. Users accessing our Website from jurisdictions that require prior consent for non essential cookies will be presented with a cookie consent mechanism before non essential cookies are set.

9. Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our cookie practices, the cookies we use, applicable laws, or industry standards. Changes will be posted on this page with an updated effective date. Material changes will be communicated through the Services, via email, or through a prominent notice on our Website.

10. Contact Information

Strand Health Inc.
d/b/a Everfur
1002 Dean Street, Suite 101, Brooklyn, NY 11238
Email: privacy@everfur.com