This policy explains how The Vitality Project, LLC uses cookies and similar technologies on our website and in our member app, what each category does, and how you control them. It works alongside our Privacy Policy and our Consumer Health Data Privacy Policy.
1. What these technologies are
Cookies are small text files a site stores in your browser. A cookie set by the site you are visiting is a first party cookie. A cookie set by another company whose content appears on the page is a third party cookie.
Local storage is a larger area of your browser where a site can save information. Unlike a cookie, it is not sent to a server with every request. It stays in your browser until it is cleared.
Session storage works the same way as local storage, except it is emptied when you close the tab.
Pixels, web beacons, and clear images are tiny files embedded in a page or an email. Loading one tells the sender that the page was opened or the email was read. They usually work together with cookies.
Software development kits and embedded players are pieces of another company's code running inside our page, for example a video player. They can set their own storage.
We use the word "cookies" in this policy as shorthand for all of these.
2. How the member app uses browser storage to work at all
This part matters more than cookies on our service, so we want to be clear about it.
The member app keeps a lot of your working state in your browser's local storage. That includes which role you are signed in as, your theme and display preferences, your notification and quiet hours settings, your progress through a survey or a wizard before you submit it, which banners you have dismissed, your draft text, your position in a video or audio practice, and similar app state.
Three things follow from that:
- This storage is not optional. It is how the app runs. There is no version of the app that works without it. It falls under the essential category in Section 4 and there is no consent toggle for it.
- It stays in your browser. It is not an advertising profile, it is not sold, and it is not shared with anyone.
- Clearing it signs you out and resets your preferences. Anything not yet saved to your account is lost. Section 7 explains how to clear it if you want to.
3. Why we use cookies
- To sign you in and keep you signed in, and to keep your session secure.
- To remember your settings, so the app looks and behaves the way you left it.
- To make features work, such as video and audio players, embedded content, and forms.
- To understand how the service is used, so we can fix problems and improve it.
- To credit the right affiliate or referral partner when someone joins through their link.
- To measure our advertising and to show our ads to people likely to be interested, on our marketing website only.
- To keep the service secure and to detect abuse.
4. Categories we use
4.1 Strictly necessary
Required for the site and the app to work. They cannot be switched off through our consent controls, because switching them off would break the service. They do not require consent under privacy law.
| What it does | Type | Set by | How long |
|---|---|---|---|
| Keeps you signed in and identifies your session | First party cookie | The Vitality Project | Session, or until you sign out |
| Protects forms against cross site request forgery | First party cookie | The Vitality Project | Session |
| Load balancing and routing | First party cookie | Our United States cloud hosting provider | Session |
| Records your cookie choices so we do not ask again | First party cookie | The Vitality Project | 6 months |
| App state: role, theme, preferences, drafts, progress, dismissed banners | Local storage and session storage | The Vitality Project | Until you clear it |
4.2 Functional
Remember choices you made and enable features you asked for. Turning these off does not break the app, but some things will be less convenient.
| What it does | Type | Set by | How long |
|---|---|---|---|
| Remembers your language, time zone, and display choices when they are not yet saved to your account | First party cookie or local storage | The Vitality Project | 12 months |
| Loads our typefaces | Third party request, no cookie set by us | Google Fonts, fonts.googleapis.com and fonts.gstatic.com | Browser cache |
| Plays embedded videos | Third party cookies and storage | YouTube, via youtube-nocookie.com where available | Set by YouTube, see Section 6 |
| Runs the newsletter sign up and reading experience | Third party cookies | Substack | Set by Substack, see Section 6 |
| Runs the conversational sign up assistant on our marketing pages | Third party cookies | ManyChat | Set by ManyChat, see Section 6 |
4.3 Analytics and performance
Tell us which pages and features are used, where people get stuck, and when something breaks. Where analytics is switched on we use it in aggregate to improve the service, not to build a profile of you. No third-party analytics tool is running on our site today, and the table below is the list of tools we may use, kept current on this page.
Analytics runs on our marketing website only. It does not run in the member app, at checkout, or on any wellness, survey, Vital Check, mental health, journaling, or AI page.
| Tool | Provider | What it does | Typical duration | Opt out |
|---|---|---|---|---|
| Website analytics, such as Google Analytics 4 | Google LLC, or a comparable analytics provider | Counts visits, pages, traffic sources, and marketing site sign ups, configured with IP addresses truncated and advertising signals off | Up to 2 years for a main identifier cookie, up to 24 hours for a session cookie | Reject All or the analytics category in our banner, the Google Analytics opt out add on at https://tools.google.com/dlpage/gaoptout, or your browser's cookie controls |
| Tag management, such as Google Tag Manager | Google LLC | Loads the tools in this section, only as far as your consent allows. Sets no cookie of its own | No cookie set | Governed by your banner choice |
| Error and performance monitoring | The Vitality Project, with our hosting provider | Reports crashes, failed requests, and page performance so we can fix them. It records the page address, the browser, and the error. It does not record the content of your answers, your journals, or your AI messages | Up to 13 months | Not running today. When we add it, it will be strictly necessary for service reliability and will not require consent. |
Where things stand today. Nothing in this table is running. Anything we add runs only under the rules in this section, behind the consent banner, and on the marketing website only, and it appears in this table before it is switched on. We set every analytics tool to the most privacy protective configuration it offers.
4.4 Advertising
We advertise our programs, and to measure that advertising we may use services such as Meta, Google, TikTok, and similar providers. Where one of them is switched on, it tells an advertising platform that a visit, a sign up, or a purchase happened, so we can measure our advertising and show our ads to people likely to be interested.
Nothing in this category is running today. No advertising or marketing tool of any kind is installed on our site at this moment. The table below is the list of tools we may use and what each one would do. This page is the current list, we keep it up to date here, and a tool appears in the table before it is switched on, never after.
Where they run, and where they never run. These tools run on our marketing website only. No advertising or marketing tool of any kind runs in the member app, at checkout, or on any wellness, survey, Vital Check, mental health, journaling, or AI page. Nothing you answer, write, track, or say to our AI features is ever sent to an advertising platform, and consumer health data is never used for advertising. Our Consumer Health Data Privacy Policy states that commitment in full.
Read the table as a list of what we may switch on, not as a list of what is running.
| Tool | Provider | Purpose | Typical duration | Opt out |
|---|---|---|---|---|
| Meta Pixel and Conversions API | Meta Platforms, Inc. | Measures marketing website visits and sign ups from Facebook and Instagram ads, and builds audiences for those ads. The Conversions API sends the same marketing website events from our server, with identifiers hashed, and only where you accepted this category | Up to 90 days for the _fbp browser cookie |
Reject All or the advertising category in our banner, the Your Privacy Choices link in our footer, Global Privacy Control, and your Meta ad preferences at https://www.facebook.com/adpreferences |
| Google Ads, including remarketing and conversion tags | Google LLC | Measures which ads and search terms lead to a sign up, and shows our ads to people who visited the marketing website | Up to 90 days for conversion linker cookies, up to 540 days for advertising cookies where permitted | Reject All or the advertising category in our banner, Google Ads Settings at https://adssettings.google.com, and Global Privacy Control |
| Analytics advertising features | Google LLC | Shares marketing website measurement with our ad accounts so sign ups can be attributed to a campaign | Up to 2 years | Same as above, plus the Google Analytics opt out add on |
| TikTok Pixel | TikTok Inc. | Measures marketing website visits and sign ups from TikTok ads, and builds audiences for those ads | Up to 13 months | Reject All or the advertising category in our banner, and your TikTok ad personalization settings |
What these tools receive and what they do not. They receive the fact that a browser visited a marketing page, started a checkout, or completed a purchase, along with the page address and, where a server side connection such as the Conversions API is in use, a hashed email address where you gave us one. They never receive a survey answer, a Vital Check response, a journal entry, an AI conversation, a wellness score, or anything else that says something about your health.
What this means legally. Whenever any of these tools is in use, our sharing of information with the platform counts as "sharing" for cross context behavioral advertising under California law, and as "targeted advertising" under other state privacy laws. We do not sell personal information for money. The consent banner in Section 5.1, the Global Privacy Control commitment in Section 5.3, the Your Privacy Choices link in our footer, and the state opt out rights in Section 10 of our Privacy Policy all apply in full whenever these tools are running.
4.5 Affiliate and referral
When you arrive through an affiliate or referral link, the link carries a code. We record that code so the right person is credited and paid when you join. This is our own commission program, not advertising, and the code is not shared with an advertising network.
| What it does | Type | Set by | How long |
|---|---|---|---|
| Reads the referral or discount code from the link address and holds it until checkout, then attaches it to the sale | Stored in your browser. | The Vitality Project | 30 days, then it clears. |
| Holds a code you typed in at checkout but did not use | First party local storage | The Vitality Project | Until used or cleared |
We record the code, the date, the plan purchased, and the commission owed. We do not tell the affiliate what you answered in a survey, wrote in a journal, or said to the AI coach. Nothing in that program ever touches health data.
5. Your choices
5.1 The consent banner
As of the date at the top, nothing that needs consent is running on the website, so no banner appears yet. The first time we switch on any tool in Section 4.3 or 4.4, and again when our use changes materially, we will show a consent banner with three choices: Accept All, Reject All, and Preferences. How it behaves:
- Accept All and Reject All are given equal prominence, in the same style, at the same level, on the first screen. Rejecting is never hidden behind an extra click that accepting does not require.
- Nothing but strictly necessary cookies runs before you choose. Analytics and anything else in Section 4.3 stays dormant until you say yes. The functional embeds in Section 4.2 load only when you use the feature, for example when you play a video or sign up for the newsletter.
- You can choose by category. A "Manage preferences" control on the banner lets you accept some categories and refuse others.
- No dark patterns. No pre ticked boxes, no colored Accept against a greyed out Reject, no wording that implies the service will not work if you refuse.
-
Refusing costs you nothing but the feature itself. We do not deny you the service, charge you more, or give you a worse experience because you refused a non essential category.
- We remember your choice, and we ask again after 6 months or whenever we add a tool.
5.2 Changing your mind
Once the banner is in use, you can reopen your cookie preferences at any time through the Your Privacy Choices link in the footer of our website pages, and in the app under Settings. Your new choice applies straight away, and we stop setting anything in a category you turned off.
5.3 Global Privacy Control
We honor the Global Privacy Control. If your browser or extension sends that signal, we treat it as an instruction to opt out of the sharing of personal information for cross context behavioral advertising and of targeted advertising for that browser, without you having to do anything else. In practice that means the advertising tools in Section 4.4 do not run and the Conversions API does not fire for you. If you are signed in we also record the preference against your account. You can make the same choice at any time through the Your Privacy Choices link in our footer.
We do not respond to Do Not Track headers, because no common standard for them was ever agreed.
5.4 Browser controls
Every major browser lets you block or delete cookies, and lets you block third party cookies specifically. Blocking all cookies will sign you out and may stop parts of the app working. The instructions live in your browser's own help pages, under Privacy or Site Settings.
6. Third party content on our pages
Some of our pages include content served by other companies. When your browser loads that content, that company can see your IP address and may set its own cookies under its own policy. We do not control what they set. The companies are:
| Company | Where it appears | Their policy |
|---|---|---|
| Google Fonts | Typefaces on the site and the app | https://policies.google.com/privacy |
| YouTube, a Google company | Embedded videos on marketing pages and in on demand content | https://policies.google.com/privacy |
| Substack | Newsletter sign up and article embeds | https://substack.com/privacy |
| ManyChat | Conversational sign up assistant on marketing pages | https://manychat.com/legal/privacy |
| Stripe | Checkout, billing, and card fraud prevention | https://stripe.com/privacy |
| Meta Platforms | Only if we switch advertising on, which we have not. Advertising and measurement pixels on marketing pages | https://www.facebook.com/privacy/policy |
| TikTok | Only if we switch advertising on, which we have not. Advertising and measurement pixel on marketing pages | https://www.tiktok.com/legal/privacy-policy |
| Google Ads and Google Analytics | Only if we switch advertising on, which we have not. Advertising and measurement on marketing pages | https://policies.google.com/privacy |
We set our YouTube embeds to the privacy enhanced player at youtube-nocookie.com, and we load an embedded player only after you accept functional cookies or choose to play the content. Until then the page shows a still image and a play button, and nothing is requested from YouTube.
7. Clearing what is already stored
Cookies. Use your browser's settings, usually under Privacy, Clear browsing data, or Site settings. You can clear cookies for our site only rather than for every site.
Local storage and session storage in the app. Clearing site data for jointhevitalityproject.com in your browser settings removes them. Doing this signs you out, resets your preferences, and discards anything you had not yet saved.
Everything we hold on our servers. Clearing your browser does not delete information stored in your account. To do that, use the rights in Section 12 of our Privacy Policy.
8. Changes to this policy
We may update this policy when the technologies we use change, or for legal or operational reasons. When we do we will change the updated date at the top. If we add a category or a tool that requires your consent, we will ask for that consent again before it runs, rather than relying on a choice you made earlier.
9. Contact
- Privacy and cookies: support@jointhevitalityproject.com
- Support: support@jointhevitalityproject.com
- Mail: The Vitality Project, LLC, 525 E Amiata Way, Washington, Utah 84780