Cookies Policy

1What is a Cookie?

Cookies are small text files that a website stores on your device (computer, phone, or tablet) when you visit. They allow the website to recognize your device, remember your preferences, and understand how you interact with the site. Some cookies are essential for the site to function, while others help us improve the service or measure marketing effectiveness.

This policy covers both expiwell.com (this website) and the ExpiWell application. The two surfaces share a single consent record, so a choice you make in one is honored in the other. Each table below names which surface sets the cookie.

2Your Consent

How we ask depends on where you are, because the law does.

If you are in the European Economic Area, the United Kingdom, Switzerland, Canada or China: nothing non-essential runs until you say so. When you first visit, you will see a cookie banner asking which categories you allow. Essential cookies are always active because the site cannot function without them. All other categories (Functional, Analytics, Marketing) are off by default and only activate after you explicitly opt in. This is what the ePrivacy Directive and UK PECR require; Quebec's Law 25 and China's PIPL ask for the same, and the ExpiWell application does it everywhere.

Everywhere else: analytics runs from your first page view, and you can switch it off. The banner tells you what is on and links to the same "Cookie choices" control, where each category has its own switch. The footer also carries a "Your Privacy Choices" link — the title United States state laws use for this control — which opens the same dialog. This is the notice-and-opt-out model that United States state privacy laws use. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of advertising cookies automatically — you do not need to click anything. An explicit choice you make on this site takes precedence over the browser signal.

We decide which model applies from the country Cloudflare reports for your connection. If that cannot be determined, you get the stricter model.

You can change your preferences at any time through the "Cookie choices" link in the footer. Withdrawing consent is as easy as granting it, and any cookies in a category you withdraw consent for are deleted from your browser at the moment you withdraw. A choice you make is remembered for 6 months and is honored by both this website and the application.

3Cookie Categories

We organize our cookies into four categories based on their purpose. Below is the complete list of cookies we use, their providers, purposes, and retention periods.

4Essential Cookies (Always Active)

Essential cookies are required for the site to function correctly. They support core capabilities such as authentication, security, and recording your consent preferences. These cookies cannot be disabled.

5Functional Cookies (Your Choice)

Functional cookies remember choices you make to give you a better experience, such as your preferred language in the application, and enable the live-chat widget. With functional cookies off, your language preference in the application is still saved to your account on our servers but does not persist in your browser between sessions, and the chat widget does not load. Whether they start on or off depends on where you are — see section 2.

Names, durations and domains for the Zoho cookies are the ones Zoho publishes in its SalesIQ cookie policy; the louis5- prefix is our SalesIQ portal name. The last three are set by Zoho on its own domain, where we cannot delete them for you: the two session cookies clear when you close your browser, and uesign expires after a month.

The chat widget does not track you. SalesIQ can build a profile of every visitor it loads for — IP address, location, device, each page viewed and for how long — and we have switched that off (tracking.off() in the widget's initialization, and the console option that copied your name and email out of forms on this site is disabled). What remains is a chat you choose to start, and the cookies above that make a conversation work. On this website locale is not set — the language is part of the page address — which is why the "Cookie choices" dialog here lists only the chat cookies under Functional.

One item is not a cookie: the light/dark theme switch stores your choice in your browser's local storage, on this device only, so the page does not flash the wrong colours on your next visit. It holds nothing but the word "light" or "dark".

6Analytics Cookies (Your Choice)

Analytics cookies help us understand how visitors interact with our site so we can improve it. We use Google Analytics 4 to collect usage statistics such as page views, session duration, and traffic sources. In the EEA, the UK, Switzerland, Canada and China these cookies load only after you opt in; elsewhere they are on from your first page view until you switch them off (section 2).

Google Analytics is configured under Google Consent Mode v2: every visitor starts with data collection denied, and it is enabled only by your choice or, where the law allows, by the regional default described in section 2. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.

These two are the only cookies Google Analytics 4 sets (Google's list). Earlier versions of this policy also listed _gid and _gat; those belong to the older Universal Analytics product, which we have never run on this site, and they were removed in version 4.0 so that this table describes what actually happens. Google Signals — Google's option to link visits to signed-in Google accounts for demographics and cross-device reporting — is switched off for our property.

We also use Cloudflare Web Analytics in this category. It is not a cookie: it is a small script from our hosting provider that counts page views without setting or reading anything on your device, without fingerprinting, and without storing your IP address (Cloudflare's description). It runs under the same rule as Google Analytics — from the first page view where analytics is on by default, only after you opt in where it is not. Switching Analytics off in "Cookie choices" stops it from loading on your next page load; like the Google tag, a copy already running keeps working until you leave the page.

7Marketing Cookies (Your Choice)

Marketing cookies are used to measure the effectiveness of our advertising campaigns and to show relevant ads. We use Google Ads conversion tracking to understand which marketing channels bring researchers to ExpiWell, and Google Ads remarketing, which lets Google show ExpiWell ads to people who have visited this site. We never sell your data. In the EEA, the UK, Switzerland, Canada and China they load only after you opt in; elsewhere they are on unless you switch them off or your browser sends a Global Privacy Control signal.

Marketing cookies are also covered by Google Consent Mode v2. Where they are off, no marketing data is sent to Google Ads.

ew_attr is our own cookie, not Google's, and it is the only one in this table we set ourselves. It is written on expiwell.com only — the ExpiWell application never sets it, though it can read it, because the cookie is scoped to the whole expiwell.com domain.

It holds the campaign details from the link you arrived on: Google's click identifier, any utm_ values, the address of the page you landed on, and the address of the site that referred you to it. It holds no name, no email address, and no record of your browsing beyond that single arrival.

It is read in two places. If you go on to create an account, it is read at that moment, so we can count you against the campaign that introduced you. And if you book a demo, the campaign values and the click identifier are added to the booking link, so Calendly — the scheduling service that runs our demo calendar — receives them with your booking.

Decline marketing cookies and it is never written. Withdraw at any time and it is deleted: immediately if you withdraw here, and otherwise on your next visit to expiwell.com.

8Cookies We Do Not Use

For full transparency, we want to confirm that neither expiwell.com nor the ExpiWell application uses the following tracking technologies:

• Facebook Pixel or Meta Conversions API
• LinkedIn Insight Tag
• Microsoft Clarity (session recording)
• Hotjar
• AdRoll
• HubSpot tracking cookies
• Twitter / X conversion tracking

Our Google tags are loaded directly by the site, not through a third-party tag-manager container, so no tag can be added to your browser without a reviewed change to this site's code.

Two things this site loads are not trackers but are named here for completeness: Cloudflare Turnstile, the bot check on the contact form, which sets no cookie and sends only what is needed to tell a person from a script; and Cloudflare Web Analytics, described under Analytics above.

If we add any new tracking technology in the future, we will update this policy and re-prompt you for consent before activating it.

9How Long Are Cookies Stored?

Each cookie has a specific retention period listed in the tables above. Cookies fall into two storage types:

• Session cookies are deleted automatically when you close your browser.
• Persistent cookies remain on your device for a defined period (e.g., 24 hours, 1 year) or until you manually delete them.

Your consent preferences (the ew_consent cookie) are stored for 6 months. After this period, you will be asked to confirm your preferences again. You may also be re-prompted if we update the cookie policy in a way that materially affects what data is collected.

10How Do I Manage Cookies?

You have several ways to manage cookies:

• ExpiWell cookie choices: Use the Cookie choices link in the footer at any time to review and change your consent.
• Browser settings: All major browsers let you block, delete, or restrict cookies. Note that disabling essential cookies will prevent the site from functioning properly.
• Per-browser instructions: Chrome, Firefox, Safari, Edge.

11Your Rights Under GDPR

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:

• The right to withdraw consent at any time (Article 7) — use the "Cookie choices" link
• The right to access the personal data we hold about you (Article 15)
• The right to request deletion of your data (Article 17)
• The right to lodge a complaint with your local supervisory authority (Article 77)

For more information about how we process your personal data, see our Privacy Policy and our GDPR Policy.

12Changes to This Policy

We may update this Cookies Policy from time to time. When we make material changes (such as adding a new tracker or category), we will increment the version number, update the "Updated" date at the top of this page, and re-prompt you for consent. Minor changes (such as clarifications or formatting) will be reflected without re-prompting.

13Contact Us

If you have questions about our use of cookies or about your privacy rights, please contact us at privacy@expiwell.com.