NeuroMyelin Cookie Policy

NeuroMyelin does not use advertising cookies or track you around the web. With your permission, we use Google Analytics 4 to understand how the website and web app are used. Analytics is optional and does not load unless you accept it.

We store a sign in token so you stay signed in between visits, a few small settings such as your theme and account features, and your analytics choice. If you accept analytics, Google Analytics may also set _ga and _ga_<measurement ID> cookies to distinguish browsers and sessions. We configure these cookies to last up to 180 days without renewing their expiry on each visit. Our nm_analytics_choice cookie remembers your decision, the date and the notice version for 180 days. On neuromyelin.com and its app subdomain, that decision is shared so you do not have to choose twice.

The sign in token is essential. Without it you would have to sign in again on every page. Analytics is not essential: declining it does not affect access to NeuroMyelin. We use analytics only to understand navigation and improve the product, not for advertising or profiling.

After consent, Google Analytics may receive information such as the page area visited, approximate location, device and browser information, a broad referral category, generic page areas and events such as signup, email verification, import completion, first capture and first successful Recall. We send only approved page labels, with placeholders for memory and email records. For recognised search engines, we provide the engine homepage as the referral source; other external referrals are grouped as other. Query strings, fragments, full referrer URLs, admin pages and public-share links are excluded. Analytics cookies identify a browser; these reports are not anonymous individual records. We do not send memory titles, saved content, filenames, search terms or AI conversations to Google Analytics.

Separately from Google Analytics, our server counts successful requests for a fixed set of public pages, including visits where Analytics is declined. These are request counts, not identified visitors. Health checks, known bots, static files, API requests and app routes are excluded. These counters do not use browser cookies or visitor IDs and do not send anything to Google. The temporary counting logs contain the public page label, timestamp and response status, with technical log metadata. They exclude IP addresses, request headers, query strings and form contents. Logs rotate hourly and are normally removed within about 26 hours; daily totals are kept for 395 days. We also keep aggregate service milestones, such as verified accounts and completed imports, and first-use flags on an account to avoid counting the same milestone twice. This helps us check that signup and the product are working; it is separate from marketing subscriptions.

Google processes optional analytics information under its service terms and data protection terms, which may involve processing outside the UK. Cookie expiry is separate from retention in Google Analytics. For questions about the retention setting that applies to our Analytics property or a data request, contact [email protected]. See how Google uses information from sites that use its services.

You can clear this storage at any time from your browser settings. Clearing it signs you out, and you can sign back in with an email code or a passkey. Signing out from within the app also removes the token and ends the session on our side.

If you have any questions about how we use browser storage, please email [email protected].