COOKIE POLICY

Verendo Health LLC

Last updated: September 13, 2026
Effective date: October 1, 2026
Applies to: verendohealth.com, with or without “www”

1. What this policy covers

This policy explains the cookies and similar technologies used on the Verendo Health website. It tells you what we set, why we set it, how long it lasts, and how to change your mind.

Read it alongside our Privacy Policy, our Consumer Health Data Privacy Policy, our Terms of Service, and our Medical Disclaimer.

2. What cookies and similar technologies are

A cookie is a small text file a website asks your browser to store. The next time you visit, your browser hands that file back, so the site can remember something about your last visit.

“Similar technologies” means other ways a site can store or read information on your device. The ones that matter here are:

• Local storage and session storage. Storage areas in your browser that a website can write to. They work like cookies but are not sent along with every request.
• Pixels and tags. Tiny files or scripts loaded from another company’s server that let that company see that you loaded a page.

This policy covers all of these. When we say a tool “sets no cookies” or “stores nothing on your device”, we mean it leaves nothing behind in your browser; we still list it and say what it sends.

Cookies can be first-party (set by verendohealth.com) or third-party (set by another company). They can be session cookies (deleted when you close your browser) or persistent cookies (they stay for a set time).

3. Our approach: cookies are opt-in and off by default

Verendo runs an opt-in consent model for cookies. When you first arrive, a banner appears, and no cookie outside the strictly necessary category is set until you choose to turn it on. No boxes are pre-ticked. Choosing “Only necessary” is a real choice, not a delay tactic, and the site works normally either way.

One tool sits outside the banner: Cloudflare Web Analytics runs on every page. It sets no cookies and stores nothing on your device, so the banner does not control it. Section 4.2 explains exactly what it records.

We also want to be direct about something we think matters more than cookies:

• Your health data never touches website analytics. Intake answers and lab results are stored in a database on a Google Cloud server that we control, separate from this website, and are never sent to an analytics tool.
• Your health data never goes to an AI vendor. Our analysis engine is deterministic. It does not call a large language model while it runs, and no client health information is sent to Anthropic or to any other AI provider.
• Your lab results never go to our payment processor. When you buy a panel, Stripe processes the payment. Stripe receives your name, email address, billing details and the fact that you bought a Verendo lab panel. It never receives your intake answers, lab results, inferences or reports.

4. The categories in our banner

The consent banner offers three categories.

4.1 Strictly necessary (always on, cannot be turned off)

These are needed for the site to work and for us to honor the privacy choice you made. Right now this category contains exactly one cookie: the one that records what you chose in the banner. We cannot remember that you declined analytics without storing the fact that you declined.

4.2 Analytics

We use Cloudflare Web Analytics on every page of this website. It sets no cookies and stores nothing on your device, so the cookie banner does not control it. It counts page views and records the page you viewed, the page that referred you, your browser type and your approximate country. It does not identify you and does not follow you to other websites. Cloudflare already hosts this website, so using it adds no new company to the picture.

We do not run any other analytics or advertising trackers on this website. Our website code includes an error-monitoring tool, Sentry, that is switched off; if we ever turn it on, we will update this page first. Matomo runs on our own server for internal use and is not connected to this website. No analytics tool receives your health information.

What the Analytics switch in the banner does today: nothing. No analytics cookie exists on this site to accept or refuse, and turning the switch on or off does not start or stop Cloudflare Web Analytics. If we ever add an analytics tool that sets cookies or stores anything on your device, it will sit behind this switch, off until you turn it on.

4.3 Marketing (opt-in, off by default)

Reserved for measuring affiliate referrals and advertising performance, if and when we run those channels.

Status on the date above: nothing in this category is running. The category appears in the banner, but the site loads no advertising or referral trackers, and turning it on sets no cookie today.

5. What we actually set

We list only what the live site actually does. If a technology is not in these tables, we are not using it.

5.1 Set or running today

Technical detail for vh_cc_cookie: it is scoped to .verendohealth.com with path / and SameSite=Lax, so that if we add other Verendo web addresses, such as a client app, your choice carries over instead of being asked again. It holds no name, no email address, and no health information.

That is the complete list: one cookie, set only after you make a choice in the banner, and two Cloudflare scripts that set no cookies. Section 8 describes the one case where Cloudflare itself may set a security cookie.

Two things follow from that:

• The site writes no local storage and no session storage.
• A normal page request returns no Set-Cookie header from our server or from Cloudflare. No cookie is placed on your device until you make a choice in the banner.

5.2 Built into the code but not active

These exist in the site’s source code but are switched off. None of them runs or sets anything on the date above. Those in the Analytics or Marketing category would also need you to accept that category before they could run. We list them so you know about them before they are ever turned on. Before any of them goes live, we will update this policy and the banner text.

The banner is also configured to delete advertising cookies named _fbp, _gcl_, and _tt_ (Meta, Google Ads, and TikTok) if it ever finds them and you have not accepted the marketing category. That is a cleanup rule, not a disclosure that we set them. We do not run any of those trackers.

6. How to change or withdraw your choice

While the banner is on screen. It appears at the bottom right on your first visit, titled “Cookies on Verendo.” It gives you three options:

• “Accept all” turns on every category.
• “Only necessary” leaves the Analytics and Marketing categories off.
• “Manage preferences” opens a panel titled “Cookie preferences” with a separate switch for each category. Set the switches you want, then choose “Save preferences.”

None of these choices affects Cloudflare Web Analytics, which sets no cookies and runs on every page (Section 4.2).

After you have already chosen. Use the “Cookie preferences” link in the footer of every page. It reopens the same “Cookie preferences” panel described above; change any switch and choose “Save preferences.” Two further options also work:

1. Delete the vh_cc_cookie cookie in your browser’s site-data settings for verendohealth.com, then reload the page. The banner will reappear and you can choose again. Section 7 explains where to find those settings.
2. Email us at [email protected] and tell us what you want turned off. We will confirm in writing.

What happens when you withdraw consent. Today no optional category collects anything, so turning one off changes nothing. If we ever add a tool behind one of these switches, turning it off will stop further collection immediately and clear the cookies tied to that category. It does not by itself erase data we already collected. To ask us to delete data we already hold, email [email protected]. When we verify a deletion request, we delete your information within 30 days, including any copies we hold, and confirm in writing what was deleted and what we had to keep.

7. Browser-level controls

Every major browser lets you block or delete cookies yourself. Look for the privacy or site-data section of your browser settings:

• Chrome: Settings, then Privacy and security, then Third-party cookies and Site data.
• Safari: Settings, then Privacy, then Manage Website Data.
• Firefox: Settings, then Privacy and Security.
• Edge: Settings, then Cookies and site permissions.

You can also browse in a private or incognito window, which discards cookies when you close it.

Two things to know:

• Blocking all cookies also blocks the cookie that remembers your consent choice, so the banner will come back on every visit.
• Do Not Track and Global Privacy Control. A Global Privacy Control signal tells a site not to sell or share your personal information. We do not sell or share it at all, so there is nothing for that signal to switch off. We have not yet built separate technical handling for a Global Privacy Control or Do Not Track signal, and we are not going to claim we have. If you want to be certain, email [email protected] and we will treat your request as a withdrawal of consent and confirm in writing. The Privacy Policy and the Consumer Health Data Privacy Policy say the same thing.

8. Third parties involved

• Cloudflare hosts this website, manages our domain name, provides HTTPS and protects the site from attacks. Every request to verendohealth.com passes through Cloudflare’s network. Cloudflare also runs Cloudflare Web Analytics and the email-address protection script described in Section 5.1, neither of which sets cookies. We do not configure any Cloudflare cookie ourselves. We checked on September 13, 2026, and ordinary page requests to verendohealth.com, with or without “www”, set no Cloudflare cookies at all. Cloudflare may still set a short-lived security cookie if it has to challenge traffic it thinks is automated.
• Resend sends our email. If you join our email list, your email address is stored as a contact by Resend, which also sends you a confirmation email. Separately, Cloudflare keeps a proof-of-signup record that contains only a scrambled one-way code made from your email address, a scrambled code made from your IP address, a shortened description of your browser, your approximate country and the time you signed up. It is kept for 5 years so we can show that you asked to join. You can unsubscribe from the list at any time. None of this uses a cookie, but we list it so the picture is complete.
• Google Workspace hosts our email inboxes, including [email protected] and [email protected]. It receives anything you email us, including any health information you choose to include, and is covered by Google’s Business Associate Agreement.
• Google Cloud hosts the server that stores intake answers, lab results and reports. Health information is stored in a database on a Google Cloud server that we control, covered by Google’s Business Associate Agreement. That agreement is a contractual choice we made for our own discipline, not a sign that HIPAA applies to us. It does not: Verendo is not a HIPAA covered entity.
• Stripe processes payment when you buy a panel. Stripe sets its own cookies on its own checkout pages, and those are governed by Stripe’s privacy notice, not this one. Stripe receives your name, email address, billing details and the fact that you bought a Verendo lab panel. It never receives your intake answers, lab results, inferences or reports.
• Fullscript orders your lab panel through its Authorization Network, where a licensed network clinician reviews and signs the order. If you choose to buy supplements we recommend, Fullscript also fills that order. Quest Diagnostics performs the blood draw at a Patient Service Center and runs the tests. If you choose the at-home draw, Getlabs performs the draw at your home and receives your name, date of birth, address, phone number, appointment details and the specimen. None of these companies sets a cookie on verendohealth.com. If you visit their sites, their own cookie notices apply.

We do not sell your personal information, and we do not sell health data. We do not run advertising trackers on this site.

9. Your rights

Depending on where you live, you may have the right to know what we collect, to get a copy of it, to correct it, to delete it, and to withdraw your consent. Residents of Washington, Nevada, and California have specific rights covering consumer health data. Those rights are described in our Privacy Policy and our Consumer Health Data Privacy Policy. To exercise any of them, including withdrawing your consent, email [email protected] or write to us at the mailing address in Section 11. We do not offer self-serve privacy controls; every request is handled by email or post.

10. Changes to this policy

If we add a cookie, change a provider, or change what a category does, we will update this page, update the effective date above, and increase the banner’s version number so that you are asked to choose again. If a change is material, we will also give the 30 days’ notice described in our Privacy Policy.

11. Contact

Verendo Health LLC
Florida limited liability company, formed May 11, 2026
Sole member: Kevin McCall, MS, RDN, CSSD, licensed in Florida (license ND15442)

• Privacy and cookie questions: [email protected]
• General questions: [email protected]
• Mailing address: 7901 4th St N Ste 300, St. Petersburg, FL 33702

Related documents: Privacy Policy · Consumer Health Data Privacy Policy · Terms of Service · Medical Disclaimer

Verendo Health provides informational and educational analysis for healthy adults pursuing optimization. It does not diagnose, treat, or provide medical advice, and it is not a substitute for care from your own clinician.