Cookie Policy

Version 3 | Effective date: September 4, 2026

Categories of Cookies and Optional Processing

Strictly Necessary

These cookies support authentication, session continuity, security controls, consent preferences, and core functionality. They operate independently of the optional choice described below.

  • Authentication and session cookies keep you signed in and support account security.
  • Consent-preference storage records your choice in this browser so we can apply it and avoid asking on every visit.

Optional Analytics and Referral Attribution

Choosing Accept enables all of the optional processing in this section. Choosing Decline, or later withdrawing your choice, leaves or turns all of it off in that browser. There are no separate user-facing choices for the three providers.

  • Google Analytics measures traffic and use of eligible public pages and supports aggregate marketing-source attribution.
  • PostHog directly measures product use on eligible public, authentication, and checkout pages. Its browser software is not enabled on private or health routes. It may also receive thresholded daily totals for approved product events, approved category labels, and Stripe-verified revenue outcomes; those totals do not contain user identifiers, trait identifiers, gene names, rsIDs, genotypes, raw questions, payment/order/provider identifiers, or user-level results.
  • First-party aggregate counts measure product usage on consent-gated product surfaces without sending user-level product or health events from those surfaces to Google Analytics or PostHog.
  • Affonso supports partner-referral attribution on eligible acquisition routes. When you successfully sign up on an eligible acquisition route after choosing Accept, the signup payload ExomeDNA sends to Affonso contains only a pseudonymous ExomeDNA account identifier (an opaque UUID), not your email address or name. Affonso uses that identifier and referral information to determine whether a valid partner referral exists and, if so, to support referral and commission attribution. Affonso may also receive ordinary network information, such as an IP address, when the request is transmitted. This processing is not anonymous: ExomeDNA can link the identifier to your account, and Affonso may link it to its referral and conversion records.

Affiliate Attribution Rule

ExomeDNA applies a 60-day last-click rule when deciding which eligible partner receives credit for a qualifying purchase. This describes ExomeDNA's commercial attribution rule. It is not a statement about how long an Affonso cookie remains in your browser.

Genetic and Health Data Boundary

ExomeDNA does not send raw DNA files, genotype data, rsIDs, gene names, raw Gene questions, report content, or user-level results to Google Analytics, PostHog, or Affonso. Provider scripts are not permitted on ExomeDNA's private or health routes. Analytics and referral cookies do not contain genetic data.

Manage or Withdraw Your Choice

You can change the single optional choice at any time through the Cookie Settings link in the page footer or, when signed in, through Privacy Settings. Withdrawing turns off new optional analytics and referral-attribution collection from that browser. It also removes Affonso scripts, globals, and cookies from that browser.

Withdrawal does not mean that information a provider received before withdrawal is automatically deleted. We retain PostHog analytics event data for up to 36 months, then delete it automatically. We may retain anonymous, aggregated statistics that cannot reasonably be linked to you for longer.

Questions: support@exomedna.com.