Cookies Notice
What we store on the device you are reading this on, what leaves it, and how you change your mind at any time.
Effective: 1 September 2026 · Last updated: 4 November 2026
Manage your preferences
Your cookie choice
We are waiting for you to choose. Nothing optional is stored on your device until you accept.
1. What this covers
This policy covers what we store on the device you are reading this on, and what leaves it. Cookies are only part of that. Some of what we use is not a cookie at all - it is local storage, which sits in your browser and, for the purposes of this policy and of the law, behaves the same way. We describe both.
It applies to our websites, octohealth.com and hioctohealth.com. What the app stores on your phone is described in the Privacy Policy.
In summary, we share the following data with third parties for assistance with our website function through cookies. We are using cookies as a “catch-all” term for tracking technologies deployed on our website.
| Third party | Info shared with or collected by third party | Purpose(s) of sharing with or collection by third party |
|---|---|---|
| Usage Data, through identifiers kept in your browser's storage (no cookies) | Analytics; and, if you allow Marketing, advertising | |
| Meta (Facebook) | Cookies and Usage Data | Advertising, Remarketing and behavioral targeting |
2. Strictly necessary
These run whether or not you accept anything, because the site, or a feature you use, needs them to work as you asked. They remember the cookie choice you made so we stop asking and protect our forms from automated abuse. They also remember choices you make on purpose, such as the region and language of this site, the region for prices and the units on protocol pages, until you change them or clear your browser's storage.
| Name | Purpose | Lifetime |
|---|---|---|
| octo_consent | Remembers your cookie choice, and carries an acceptance of both Analytics and Marketing to app.octohealth.com | 6 months |
| octo_attr_ref | The referral code of the member's link that brought you here, kept in your browser's storage the first time you arrive through one, so the member who referred you is credited when you join. It is sent to app.octohealth.com when you continue to become a member. | Until you clear your browser's storage |
| octo_checkout_gift_code | The gift code from the gift link you followed, kept in your browser's storage for this tab only, so a refresh of the page keeps it. It is sent to app.octohealth.com when you continue. | Until you close the tab |
| octo_site | The site you chose, its region and language, kept in your browser's storage when you pick one in the region selector or in the suggestion at the bottom of the page, so the site opens in that version when you come back. | Until you clear your browser's storage |
| octo_moved | A note, kept in your browser's storage for this tab only, that the site already opened the version for your region and language once in this visit, so it does not do it again and you can go back. | Until you close the tab |
3. Analytics
We measure how the site is used so we know which pages help and which do not. Google Analytics does this. It runs only where you have allowed Analytics. It sets no cookies on our sites: we send the measurements ourselves, and the identifiers it needs are kept in your browser's local storage rather than in a cookie. They are random identifiers and counters, and they say nothing about you. If you also allow Marketing, some of these measurements may be used for advertising. We also count how often each protocol is opened, without storing anything on your device.
4. Marketing
We advertise, and we measure whether those adverts lead anywhere. This is Meta's advertising pixel. It sets up to two cookies, and records that a visit happened, or that you started to become a member, along with the campaign that brought you. It loads only after you allow Marketing. When you accept, we also keep the campaign details of the link that brought you here, meaning its utm tags and any Google or Meta advert click identifier, in your browser's local storage, so we can tell which campaign led to a sign-up or a membership. They are sent to us with your sign-up, and to app.octohealth.com when you continue to checkout. If you allow both Analytics and Marketing, Google may also use measurements from our general pages to measure and target our advertising. If you refuse or withdraw Marketing, the pixel's items and the campaign details are deleted from this device, nothing more is sent to Meta, and Google is told it may not use our measurements for advertising.
5. Health records
Octo Health is a health company, so this deserves saying rather than assuming.
Your health record is not disclosed to any third-party through cookies. For example, if you tell us you are managing a chronic condition, that is health data. It is used to serve you inside the product and is not passed to an analytics or advertising tool.
6. How to change your mind
Your choice is yours to revisit, and none of this is one-way.
Use the cookie settings on this page at any time, including withdrawing a choice you made earlier.
An acceptance you make on octohealth.com that allows both Analytics and Marketing is shared with app.octohealth.com through a strictly necessary cookie, so the app does not ask you again. If you later refuse, withdraw, or turn either of them off here, that shared acceptance is withdrawn too. A refusal you make in the app applies in the app only, and accepting in the app does not switch anything on here: this site asks you separately. You can change your choice at any time on this page.
Your browser can block or delete what is stored. Blocking the strictly necessary items will stop you signing in or prevent the website from properly functioning.
There is no common standard for Do Not Track, so we do not respond to it. We honor Global Privacy Control as a refusal of Analytics and Marketing, wherever you are.
7. Cookies that are not strictly necessary
We ask for your consent before anything that is not strictly necessary is placed on your device. Nothing that stores or reads information on your device for analytics or marketing runs until you allow it. As noted above, we do not share health information for cross-context behavioral advertising.
8. Leaving the European Union
The tools described above - Google and Meta - and the two functional services our pages embed, Cloudflare's bot protection and Cal.com's call scheduling, are operated by companies in the United States, and using them means data about your visit reaches them there. Those transfers rely on the mechanisms the law provides for them.
Questions about any of this go to legal@octohealth.com.