Cookie Policy
Updated on April 7, 2026
This Cookie Policy explains how Tall 5, MB ("we", "us", "our") uses cookies and similar technologies on health-time.com (the "Website"). It should be read together with our Privacy Policy. If anything here conflicts with the Privacy Policy, this policy controls for cookie matters.
We use OneTrust to present the cookie banner and preferences center, and we support Google Consent Mode v2. You can change your choices at any time via the footer link:
How to change your choices: Go to https://www.health-time.com/ and click "Privacy Settings" in the footer.
- Company: Tall 5, MB
- Contact email: hello@health-time.com
We use OneTrust to present the cookie banner and preferences center, and we support Google Consent Mode v2. You can change your choices at any time via the footer link:
How to change your choices: Go to https://www.health-time.com/ and click "Privacy Settings" in the footer.
1) What are cookies and similar technologies?
- Cookies are small text files placed on your device by websites you visit.
- Local storage / session storage are browser storage technologies.
- Pixels / tags / SDKs load code that can read or set identifiers.
We group all of the above as "cookies" in this document.
2) When and where we show the banner
We display a cookie banner and collect consent on first visits from users located in the EEA, UK, and Switzerland. If you're outside those regions, we may not show the banner, but you can still manage preferences any time via the "Privacy Settings" footer link.
3) Your choices & Google Consent Mode v2
We honor the choices you make in the OneTrust banner/preferences center. Until consent is granted, we block all non-essential tags and pass denied values in Consent Mode v2 for the following signals:
When you click "Reject all", only strictly necessary cookies (e.g., security, load balancing, basic payments) will run. You can withdraw or change consent at any time via "Privacy Settings".
- ad_storage, analytics_storage, ad_user_data, ad_personalization
When you click "Reject all", only strictly necessary cookies (e.g., security, load balancing, basic payments) will run. You can withdraw or change consent at any time via "Privacy Settings".
4) Legal bases
- Strictly necessary cookies: processed under legitimate interests (to provide a secure, working site and complete transactions you request).
- All other categories (analytics, advertising/remarketing, chat/support/CRM): processed only with your consent.
Where required, we rely on Standard Contractual Clauses or equivalent safeguards for international data transfers.
5) How long we keep data
- Cookie lifetimes are listed in the tables below (they are set by each provider and can change).
- Google Analytics 4 event-level data retention is configured to 2 months in our property settings.
- We do not enable GA4 Signals / Advertising features.
6) Cookies and similar technologies we use
Notes: * Names and durations reflect the provider's current documentation and may vary by browser, device, or configuration.
* Some integrations use local or session storage instead of (or in addition to) cookies.
* The live, authoritative list is always shown in our OneTrust preferences center under "Privacy Settings".
How Google uses information: For details on how Google uses information from sites and apps that use their services (including Google Analytics 4, Google Tag Manager, and Conversion Linker), see https://business.safety.google/privacy/.
How Google uses information: For details on how Google uses information from sites and apps that use their services (including Google Ads and DoubleClick), see https://business.safety.google/privacy/.
* Some integrations use local or session storage instead of (or in addition to) cookies.
* The live, authoritative list is always shown in our OneTrust preferences center under "Privacy Settings".
A. Strictly Necessary / Security / Performance
| Provider | Cookie / Storage | Purpose | Party | Typical Duration |
|---|---|---|---|---|
| OneTrust (CMP) | OptanonConsent, OptanonAlertBoxClosed | Stores your consent selections and whether you dismissed the banner. | 1st | ~12 months |
| Cloudflare | __cf_bm | Bot management; helps distinguish humans from bots. | 1st | ~30 minutes |
| Cloudflare | cf_clearance | Records proof you passed a challenge/Turnstile; ensures continued access. | 1st | Varies (minutes to days) |
| Our CDN/Site | Session storage / local storage keys as needed | Load balancing, caching hints, page state. | 1st | Session / as configured |
B. Analytics & Measurement (runs only with consent)
How Google uses information: For details on how Google uses information from sites and apps that use their services (including Google Analytics 4, Google Tag Manager, and Conversion Linker), see https://business.safety.google/privacy/.
| Provider | Cookie / Storage | Purpose | Party | Typical Duration |
|---|---|---|---|---|
| Google Analytics 4 (via GTM) | _ga | Stores client ID to distinguish users/sessions. | 1st | up to 2 years (default) |
| Google Analytics 4 | _ga_<measurement-id> | Persists session state for the property. | 1st | up to 2 years |
| Google Analytics 4 | _gid (if present) | Distinguishes users on a 24-h window. | 1st | 24 hours |
| Conversion Linker (Google) | _gcl_au, _gcl_aw, _gcl_dc, _gcl_gs | Stores ad-click info to attribute conversions. | 1st | ~90 days (varies) |
| Microsoft Clarity | _clck | Persists Clarity User ID and preferences. | 1st | ~1 year |
| Microsoft Clarity | _clsk | Connects multiple page views into a single session. | 1st | ~1 day |
| Microsoft Clarity (MS domains) | ANONCHK, MR, MUID, SM | Ad/anti-fraud and session tokens used by Clarity infrastructure. | 3rd | Session to ~1 year |
C. Advertising & Remarketing (runs only with consent)
How Google uses information: For details on how Google uses information from sites and apps that use their services (including Google Ads and DoubleClick), see https://business.safety.google/privacy/.
| Provider | Cookie / Storage | Purpose | Party | Typical Duration |
|---|---|---|---|---|
| Google Ads / Floodlight | _gcl_au, _gcl_aw, _gcl_dc, _gcl_gs | Conversion linking for ad attribution and remarketing eligibility. | 1st | ~90 days (varies) |
| Google (DoubleClick) | IDE, test_cookie (if present) | Ad delivery/measurement and to check if the browser accepts cookies. | 3rd | 15 minutes - ~13 months |
| Meta (Facebook) | _fbp | Distinguishes browsers for advertising and site analytics. | 1st | ~90 days |
| Meta (Facebook) | _fbc | Stores last Facebook Click ID when arriving from an ad. | 1st | ~90 days |
| TikTok | _ttp, _tt_enable_cookie | Measures and improves ad performance. | 1st/3rd | up to ~13 months / ~3 months |
| Snapchat | _scid, _sctr, sc_at | Identifiers used for Snap Ads Pixel and conversions. | 1st/3rd | up to ~1 year |
| AppLovin / Axon Pixel | Cookie/storage names vary | Ad measurement and optimization across AppLovin ad network. | 3rd | Varies |
D. Chat / Support & CRM (runs only with consent)
| Provider | Cookie / Storage | Purpose | Party | Typical Duration |
|---|---|---|---|---|
| Zendesk | __zlcmid, __zlcstore, zte2095 | Enables support chat, stores chat status and a unique ID. | 1st | Session to ~1 year |
| Klaviyo | __kla_id | Identifies site visitors for email/SMS flows when they interact with Klaviyo links or forms. | 1st/3rd | up to ~2 years |
7) Server-side signals we may send (only with consent)
For advertising measurement and optimization, we may send server-side event data from our servers (e.g., via Meta Conversions API). When enabled by your consent, we send the following hashed identifiers where applicable: gender (hashed), IP address, user agent, email, country, city. Hashing is typically SHA-256. We send these only when the relevant ad and analytics consent toggles are granted in the banner/preferences center.
8) Managing cookies
- Preferences center: Go to https://www.health-time.com/ and click "Privacy Settings" in the footer.
- Browser controls: You can also block, delete, or limit cookies directly in your browser settings. This may affect site functionality.
- Mobile settings: Your OS may offer advertising identifier resets and ad-personalization controls.
9) International transfers
Some partners process data outside the EEA/UK/CH. Where applicable, we rely on Standard Contractual Clauses or other safeguards recognized by law. Links to partner policies are available in their respective documentation and in our OneTrust banner.
10) Changes to this policy
We may update this policy from time to time (for example, if providers change their cookie usage). Material changes will be highlighted in the banner or on this page. The Effective date above shows when this version took effect.
11) Contact us
If you have questions about this policy or your choices:
Tall 5, MB
Email: hello@health-time.com
Tall 5, MB
Email: hello@health-time.com
Quick summary by category
- Strictly necessary: site security, load balancing, checkout and payment, basic consent storage. Always on.
- Analytics: GA4 and Clarity to understand site usage and improve the experience. Off until you consent.
- Advertising: Google Ads, Meta, TikTok, Snapchat, AppLovin (Axon) for measurement/remarketing. Off until you consent.
- Chat/CRM: Zendesk chat, Klaviyo for support and lifecycle communications. Off until you consent.
Reminder: You can change your choices any time via "Privacy Settings" in our footer.