Cookie Policy
Last updated: 2026-05-27
Effective Date: 2026-05-27 Last Updated: May 25, 2026
Quick Summary
- Strictly necessary cookies (authentication, security, session) are always set. The platform won't work without them.
- Functional cookies (your onboarding progress, your interface preferences) are set without consent because they only remember what you've already told us.
- Analytics cookies (PostHog) load only after you accept through our cookie banner. You can change your mind anytime.
- We do not use advertising or marketing cookies and do not share information with advertisers or data brokers.
- You can change your preferences anytime at arctuva.com/account/privacy/cookies.
1. What This Policy Covers
This Cookie Policy describes how Arctuva, Inc. ("Arctuva," "we," "us," or "our") uses cookies and similar technologies on the Arctuva platform at arctuva.com and any related services (the "Services"). This Policy supplements our Privacy Policy, which describes how we handle personal information generally.
By using the Services, you agree to the use of strictly necessary and functional cookies described in Sections 4 and 5. Analytics cookies are set only after you affirmatively accept through our cookie banner, as described in Section 6.
2. What Cookies and Similar Technologies Are
A cookie is a small text file that a website stores in your browser when you visit the site. Cookies allow the website to remember information about your visit, such as your preferences and authentication state, so that the site works correctly and you don't have to provide the same information repeatedly.
Similar technologies include:
- Local storage and session storage — browser-based storage that works like cookies but stores data in your browser without sending it to a server with every request.
- Pixel tags and web beacons — small graphics embedded in web pages or emails that record when content is loaded.
- SDKs — software development kits that mobile and web applications use to collect information.
In this Policy, we use "cookies" to refer to all of these technologies for simplicity. Where a specific technology matters, we say so.
3. Who Sets Cookies on the Services
Cookies on the Services are set by:
- Arctuva (first-party cookies) — set directly by arctuva.com and used to operate the Services.
- A small number of trusted service providers acting on our behalf, including Amazon Web Services (authentication), PostHog (analytics, only with consent), and Stripe (for subscription payment pages). We do not allow advertising networks, social media trackers, or data brokers to set cookies on the Services.
4. Strictly Necessary Cookies
These cookies are required for the Services to function. The Services cannot work without them. We do not ask for consent to set strictly necessary cookies because they do not require consent under applicable law.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
arctuva_session | Arctuva | Maintains your logged-in session | Session (deleted on browser close) |
arctuva_csrf | Arctuva | Protects against cross-site request forgery attacks | Session |
cognito_* (multiple) | Amazon Web Services (Cognito) | Manages authentication tokens issued by our identity provider | Up to 30 days (refresh token) |
arctuva_cookie_consent | Arctuva | Remembers your cookie consent choices | 12 months |
__stripe_* (on subscription pages only) | Stripe | Fraud detection on payment pages | Up to 12 months |
If you block these cookies, you will not be able to use the Services.
5. Functional Cookies
These cookies remember information you have provided so that you do not have to provide it again. They are set without separate consent because they only persist information you have already given us and do not track you across sites.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
arctuva_funnel_progress | Arctuva | Remembers your onboarding progress so you can resume where you left off | 30 days |
arctuva_locale | Arctuva | Remembers your language and region preferences | 12 months |
arctuva_ui_preferences | Arctuva | Remembers UI preferences (such as collapsed sections and theme) | 12 months |
You can clear these cookies in your browser settings at any time. Clearing them resets your preferences but does not affect your account.
6. Analytics Cookies
These cookies help us understand how the Services are used so we can improve them. We do not set analytics cookies unless you affirmatively accept them through our cookie banner.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
ph_* (multiple) | PostHog | Product analytics: page views, click patterns, feature usage | 12 months |
ph_session_* | PostHog | Session replay (with form fields and text content masked) | Session |
What we collect through analytics:
- Page views and the sequence of pages you visit
- Click patterns and which features you use
- Anonymous device and browser information (browser type, screen size, operating system, approximate region from IP)
- Performance metrics (page load times, errors)
What we do not collect through analytics:
- Form inputs and text content (all form fields are masked by default in session replay)
- Health information, medication information, condition information
- Names, email addresses, or other contact information
- Self-reported earnings amounts or other financial information
- Search queries you enter for studies
- Any other personally identifiable information
PostHog operates as our service provider under contract and may not use information collected through the Services for any purpose other than providing analytics to us.
6.1 How to Accept or Decline Analytics Cookies
When you first visit the Services, our cookie banner asks whether you accept analytics cookies. You can:
- Accept all — strictly necessary, functional, and analytics cookies are all enabled.
- Reject analytics — only strictly necessary and functional cookies are enabled. Analytics cookies are not set.
- Customize — choose individual categories.
You can change your choice at any time by visiting arctuva.com/account/privacy/cookies or by clicking the "Cookie Preferences" link in the footer of any page.
6.2 Global Privacy Control
We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we treat it as a request to opt out of analytics cookies and any other non-essential tracking, regardless of any other choice you may have made through the cookie banner. You can learn more about Global Privacy Control at globalprivacycontrol.org.
7. Cookies We Do Not Use
We do not use:
- Advertising cookies. We do not show ads on the Services, do not allow third parties to set advertising cookies, and do not participate in cross-site behavioral advertising.
- Social media trackers. We do not embed social media pixels, tags, or "like" buttons that send information to social media companies.
- Data broker trackers. We do not allow data brokers to collect information through the Services.
- Fingerprinting techniques. We do not use techniques designed to identify your device through hardware, software, or behavioral fingerprinting beyond what is necessary for security and fraud prevention on payment pages.
If our practices change, we will update this Policy and obtain any consent required by applicable law before implementing the change.
8. Email Tracking
Our transactional emails (such as account verification and security alerts) do not contain tracking pixels.
Our marketing emails (sent only to users who have opted in to marketing communications) may contain open-tracking and click-tracking pixels operated by our email service provider, Postmark. These pixels allow us to understand which emails are opened and which links are clicked. You can:
- Opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email or by visiting your account email preferences.
- Disable image loading in your email client to prevent open-tracking pixels from loading. This is a feature of most modern email clients and does not require any action from Arctuva.
We do not embed open-tracking or click-tracking pixels in transactional emails because transactional emails are required to use the Services and we do not believe tracking is appropriate for required communications.
9. Mobile Apps and Push Notifications
If we offer native mobile applications in the future, those applications may use device identifiers (such as Apple's IDFA or Google's GAID) and SDKs comparable to cookies. The choices and disclosures in this Policy will apply, with mobile-specific equivalents (such as the platform's tracking transparency framework). We will update this Policy before any mobile app launch.
10. How to Control Cookies
10.1 Through Our Cookie Banner
You can accept, reject, or customize your cookie preferences through our cookie banner on first visit, or anytime by visiting arctuva.com/account/privacy/cookies.
10.2 Through Your Browser
Most browsers allow you to:
- View what cookies are set
- Block all cookies or specific categories of cookies
- Delete cookies that have been set
- Receive a notification when a cookie is set
Browser-specific instructions:
If you block strictly necessary cookies, you will not be able to use the Services.
10.3 Through Global Privacy Control
As described in Section 6.2, we honor GPC signals as opt-outs from analytics and any other non-essential tracking.
10.4 Through Do Not Track
Browser-based "Do Not Track" signals are not consistently interpreted across the web, and there is no industry standard for their meaning. We do not currently respond to Do Not Track signals as a separate mechanism, but we honor GPC signals as described above and respect cookie preferences set through our banner.
11. Changes to This Policy
We may update this Cookie Policy from time to time. When we make material changes (such as adding new categories of cookies or new service providers that set cookies), we will update the "Last Updated" date at the top of this Policy and, where required, request renewed consent through the cookie banner.
12. Contact
For questions about this Cookie Policy:
Email: privacy@arctuva.com
Mail: Arctuva, Inc. Attn: Privacy Officer 1301 N Broadway STE 61913 Los Angeles, CA 90012
End of Cookie Policy