Cookie and Tracking Notice

Effective date August 19, 2026

1What this notice covers

This notice explains what the Nefense website stores on your device, what we do with it, and what we do not do. Our Privacy Policy covers everything else we do with personal information.

The short version: we use a small number of our own cookies to make the store work, we use advertising and analytics technology from Google and Meta if you allow it, and we never use what you bought from us to target advertising at you.

2What a cookie is

A cookie is a small text file that a website asks your browser to keep and to send back on your next visit. It is how a site remembers that you are the same person between one page and the next. Without one, signing in would not survive a click.

A first-party cookie is set by the site you are actually visiting. A third-party cookie is set by some other company whose code the site has loaded, and that is the kind used to recognize people between sites. We set third-party cookies only if you allow the advertising choice, and section 5 says who sets them.

Browsers also offer local storage, which works in a similar way and holds a little more information. We use it for the same narrow purposes as the cookies below, and everything in this notice applies to it too.

3What our site stores on your device

This is the whole list.

None of the cookies in this table is used for advertising. They are set by our site, they are sent only back to our site, and they hold the least we can get away with.

4Our own measurement

We count how the store is used: which pages get looked at, which steps of checkout people reach, and where they give up. That is how we find out that a button is in the wrong place or that a step is confusing.

This measurement is our own. It runs on our site and the information stays with us. It is separate from the advertising technology in section 5, which does send information to another company.

5The advertising and analytics we run

We use advertising and analytics technology from Google and from Meta, and only if you allow it.

This is code on our pages that reports your visit back to those companies. We use it to see whether our advertising is working and to reach people who might want what we sell. It means Google and Meta receive a record of what you looked at here and can connect it to what they already know about you.

We name every company we use, so this list is the whole list. Adding another means updating this notice before the code goes on the site, and asking you again.

We do not load any of the following, and we are naming them because they are the ones people worry about.

• A session recorder, which would replay your visit or record your mouse movements.
• A data broker script, an identity graph script, or anything that matches you against a list held by somebody else.
• Anything at all on a page about a health condition. Section 7 is that rule.

6Selling and sharing

We do not sell your personal information for money. We do share it for advertising.

Both phrases have specific meanings under state privacy law that are wider than the everyday ones. Sharing means handing your information to another company so advertising can be aimed at you on other companies' websites and apps. That is what the technology in section 5 does when you allow it, and in some states it counts as a sale even though no money changes hands.

The advertising choice on our consent banner is where you refuse, it starts switched off, and Privacy choices in the footer reopens it on any page. Doing nothing is already a refusal.

7What you bought is never used for advertising

We do not use the fact that you bought a nasal or airway product to target advertising at you, to build or seed an advertising audience, or to let another company infer anything about your health. This holds even when you have allowed advertising in section 5.

This matters more here than it would at most stores. Some state laws define health data broadly enough to reach an inference drawn from an ordinary purchase, and a purchase from us is exactly the kind of purchase an advertising system would try to draw one from. Our Consumer Health Data Privacy Notice sets out that commitment in full, including the fact that we do not use geofencing around any health care facility, pharmacy or clinic.

8The controls you have right now

Your browser is where the real controls are, and they work on this site today without anything from us.

• See and delete cookies. Every major browser lets you see the cookies a site has set, delete them, and delete them automatically when you close the browser. Look for cookies or site data in your browser's privacy settings.
• Block third-party cookies. Every major browser can block third-party cookies, and several block them by default. That stops the advertising technology in section 5 and leaves the rest of the store working normally.
• Private browsing. A private or incognito window discards cookies when you close it. You can shop that way; you will just have to sign in each time.
• Global Privacy Control. Some browsers and extensions can send a Global Privacy Control signal, which tells a site not to sell or share your personal information. We treat it as a valid opt-out and act on it, so if you send one the advertising technology in section 5 does not run and you do not have to tell us again through the banner.

Blocking the cookies in section 3 will break parts of the store, as the table says.

9The rules we hold ourselves to

These apply to the technology we run today and to anything we might add. Each one happens before it goes live, not after.

• Update this notice to name the technology, say what it collects, and say which company operates it.
• Tell existing customers before it starts, rather than letting you discover it.
• Give you a way to refuse it in the same place you would agree to it, with nothing pre-selected, and make refusing the outcome if you do nothing, wherever the law requires your agreement first.
• Keep the store fully usable if you refuse. No paywall, no degraded checkout, no nagging.
• Keep the commitment in section 7 whatever else changes. A nasal or airway purchase is not going to be used for ad targeting.

10Changes to this document

We update this document when what we do changes, when the law changes, or when we find wording that is unclear. Every version is kept, and each one records the date it took effect.

How you find out depends on how much changed. A correction that does not change your rights is simply published. A change that does affect your rights is announced before it takes effect. A change that materially alters what you agreed to is not applied to you by silence: we ask you to accept it, and continuing to browse the site is not treated as acceptance.

If you want a copy of an earlier version, or want to know what changed and when, write to support@nefense.com and we will send it to you.

11Contact

If you find a cookie or a script on our site that this notice does not describe, tell us. That would be a mistake on our part and we want to know about it.

For a question about this notice, use the subject line "Cookie notice". Our Privacy Policy covers what we collect and the rights you have over it, and our Consumer Health Data Privacy Notice covers information a state health privacy law may reach.