Cookies & tracking

Last updated May 23, 2026

In plain English

We use the minimum cookies needed to sign you in, keep the site secure, and record what you chose for analytics, marketing, and personalization.
We do not use Google Analytics, the Meta Pixel, LinkedIn Insight, or any advertising trackers.
If your browser sends the Global Privacy Control (GPC) signal, we treat that as a binding opt-out and never show you a cookie banner.
You can change your preferences any time by clearing thebindly_consent_v2entry from your browser's site data: the banner will reappear on your next visit.

Necessary

Required for sign-in, security, and to record your privacy choices. These can't be turned off: turning them off would break the site.

bindly_consent_sid
Random per-browser id (no personal data) so we can store and audit your consent decision.
Processor: Bindly Health (first-party)·Retention: 13 months
bindly_consent_v2
Your saved cookie preferences (stored in localStorage, not a real cookie). Lets us skip the banner on return visits.
Processor: Bindly Health (first-party, localStorage)·Retention: Until you clear it or change preferences
__cf_bm
Cloudflare bot-management cookie. Blocks automated abuse.
Processor: Cloudflare (sub-processor)·Retention: 30 minutes
_clerk_*
Sign-in session for authenticated members + employer portal.
Processor: Clerk (sub-processor)·Retention: Session (cleared on sign-out)

Analytics

Aggregate page-view counts to spot broken pages or slow loads. Plausible only; no Google Analytics, no Meta Pixel.

plausible_ignore
If you opt out of analytics, this records the opt-out so we don't count your future page-views.
Processor: Plausible Analytics (privacy-respecting, no PII)·Retention: Until you clear it

Marketing

None set on this site today. Re-contacting visitors who started a quote but didn't finish, and measuring ad campaigns. Off by default until you opt in.

Personalization

None set on this site today. Remembering your state, plan filters, and preferences across visits. Off by default.

Global Privacy Control (GPC)

Bindly Health honors the GPC browser signal as a legally-binding opt-out of "sale" or "sharing" of personal information under CCPA / CPRA and equivalent state privacy laws. When your browser sends GPC, we:

Suppress the cookie banner entirely: we don't ask you to override your browser preference.
Default analytics and marketing categories to denied.
Record your preference server-side with the GPC signal attached so we can prove it in any future regulatory audit.

You can enable GPC in browsers like Firefox, Brave, and DuckDuckGo.

Questions or requests

For privacy questions, data-deletion requests, or to exercise any right under HIPAA, CCPA, CPRA, GDPR, or other applicable law, email compliance@bindlyhealth.com. For the full privacy notice see our Privacy Policy.