Cookie policy

Always on

• tl-consent (localStorage). Your cookie choice. Kept for 12 months, then we ask again. The banner does not set its own cookie.
• asid (sessionStorage). Groups one visit’s page views in the first-party hit log. Not written under Global Privacy Control. Cleared when the tab closes.
• tl_session_id (localStorage). Session id for the event ledger.
• tl_attribution_first, tl_attribution_last, and tl_referrer_first (localStorage). Campaign tags and the first referring host. Written on public pages whether or not you accept analytics cookies. ?notrack=1 stops new event-ledger writes.
• notrack and tl_notrack (localStorage). Set by ?notrack=1. Stops the hit script and the event ledger until ?notrack=0 or you clear them.
• tl_admin_session (cookie). Operator sign-in only, path /admin, 12 hours. Not set for visitors.

Cloudflare may set __cf_bm or cf_clearance when it challenges a request. This application does not set those cookies and does not choose their lifetime. This site does not load a Cloudflare Web Analytics beacon.

Analytics, off until you allow it

Google Analytics 4 (G-CDR2RSN3RL) can set _ga and a property cookie after you allow Analytics. Google documents those cookies as lasting up to two years. We do not load the tag before that choice, and Consent Mode v2 starts ad_storage, ad_user_data, ad_personalization, and analytics_storage at denied. Google signals and ad personalization stay off. If you turn Analytics off, the banner deletes _ga cookies it can see on this site. How Google uses this data: https://policies.google.com/technologies/partner-sites. Google’s opt-out add-on: https://tools.google.com/dlpage/gaoptout.

Affiliate partners, off until you allow them

• Skimlinks, from s.skimresources.com. Can rewrite merchant links and may set cookies on its own domains. This site does not set those cookies or their lifetimes.
• AvantLink, from https://classic.avantlink.com. A site-ownership check, not the provider-visit redirect. Same limit: we do not set its cookie lifetime.

Both stay unloaded under Global Privacy Control. Turning the category off stops them on the next page. Cookies already set on their domains are controlled by them and by your browser.

When you click through

A provider link works without accepting cookies. The click can pass through Katalys, Awin, or UpPromote (an sca_ref parameter, or a short link on shop.plexusdx.com). That network and the provider may set cookies on their own sites. Their policies apply there. See the affiliate disclosure.

Your choices

• Cookie settings in the footer. Stored for 12 months under tl-consent. We ask again when the version changes.
• Global Privacy Control keeps Analytics and Affiliate partners off without a banner.
• Your browser can block or delete cookies and site storage. Blocking storage can stop the measurement opt-out and the cookie choice from being remembered.

Questions: partners@telehealthledger.com or the contact page.