Cookie Policy

Scope

This Cookie Policy explains how Cortexa AI, Inc. (CortexaNote) uses cookies, local storage and similar technologies on cortexanote.com and in the CortexaNote web app at app.cortexanote.com. It works together with the Privacy Policy, which describes how personal data is processed, and with the Cookie settings dialog, where you make and change your choices. The inventory further down this page lists every technology in use, its provider, purpose and lifetime.

What cookies are

A cookie is a small text file that a website stores on your device so it can recognise your browser later. Local storage and session storage are similar browser storage areas without an expiry date or that last for one tab session. Pixels, tags and software development kits are scripts that send information from your browser to a provider. This policy calls all of these cookies unless a distinction matters.

How consent works

How the first layer appears depends on where you are. In the European Economic Area, the United Kingdom, Switzerland and Japan, only strictly necessary cookies are set when you first visit: the banner offers Accept all, Reject all and Customize with equal prominence, and nothing in the Functional, Analytics or Advertising categories is stored, read or loaded until you actively choose it; continuing to browse, scrolling or closing the banner is not consent. In other regions the banner is not shown and those categories are on by default; you can turn any of them off at any time from Cookie settings, which deletes the cookies concerned and stops the related tags. We work out which of the two applies from the network address your request arrives with, as the request is handled; that address is not stored for this purpose and is not combined with anything else. Your choice is stored in the ctx_consent cookie for twelve months and applies to both cortexanote.com and app.cortexanote.com because they share one privacy programme and one cookie inventory.

Strictly necessary

Strictly necessary cookies keep the service working and are used on the basis of providing the service you request. They include the sign-in session for the web app, the token that lets the CortexaNote browser extension authenticate, bot protection on the Recorder checkout, your language and layout preferences, and the ctx_consent cookie that remembers your choice. They cannot be switched off in the dialog because the site and app would not function without them; you can still delete them in your browser.

Functional

Functional cookies load optional features from other companies, currently video players hosted by YouTube (Google LLC). When Functional is off, a placeholder appears instead of the video and nothing is sent to Google. You can load a single video by choosing Load video, which counts as consent for that video only, or allow the category for all videos.

Analytics and performance

Analytics and performance cookies help us understand how the website and the app are used and whether they perform well. On cortexanote.com we use Google Analytics 4 through Google Tag Manager, plus a first-party ctx_ga cookie that keeps the Google Analytics client ID so a later sign-up can be attributed to the same visit. We use PostHog for analytics and Datadog for performance and error monitoring on both the website and the web app. On the website, PostHog also records session replays with form inputs, text, images and payment frames hidden. Datadog Session Replay is disabled on the website. Page URLs are stripped of sensitive parameters before they are sent, and patient data, transcripts and notes are never included. These providers process data in the United States under data processing agreements.

Advertising

Advertising cookies measure whether our advertising on Google and Meta leads to demo requests, checkout starts, Recorder orders or sign-ups. When you allow this category, the Meta Pixel and Google Ads tags may set identifiers, and a first-party ctx_attr cookie remembers the campaign and ad click identifiers that brought you to Cortexa. Completed sign-ups and orders are reported to Google and Meta from our servers only when this category was allowed at the time. We never share Protected Health Information, patient identifiers or clinical content with advertising platforms, and the authenticated app does not load advertising pixels.

Changing or withdrawing consent

You can change or withdraw your consent at any time, as easily as you gave it, by opening Cookie settings from the footer of any page or from the Privacy and cookies section of the app settings. Withdrawing a category stops the related cookies and processing immediately: existing cookies for that category are deleted, the page reloads without the corresponding tags and new collection stops. Data collected before withdrawal, including requests already queued or in transit, may finish sending. Withdrawal does not affect the lawfulness of processing that took place before it.

Consent records

So that we can demonstrate consent, each choice is stored locally in the ctx_consent cookie and recorded in a consent log that contains a random consent identifier, the time, the action taken, the categories allowed, the version of this policy and of the banner, the surface on which the choice was made and the page path. The log does not contain your name, email, account, IP address or device fingerprint, and it is kept only as long as needed to evidence consent and meet legal obligations. The consent identifier is not used for any other purpose.

Japan disclosures

For people in Japan, the external transmission table on this page is presented in the format of the external transmission rules under the Telecommunications Business Act only: as a voluntary measure, it follows the disclosure format published by the Ministry of Internal Affairs and Communications and names, for each technology, the company that receives information from your device, the information sent, why Cortexa uses it, how the recipient uses it and how you can stop it. Disclosures under the Act on the Protection of Personal Information are made in the Privacy Policy, which is linked from this page. Cortexa does not provide personal data to these companies for their own marketing databases, and the authenticated app does not send patient or clinical information to analytics or advertising providers.

Browser controls

You can also control cookies in your browser: most browsers let you block all cookies, block third-party cookies, delete cookies when you close the browser or delete them one at a time. Blocking strictly necessary cookies will prevent you from signing in to the app or completing a Recorder order. Browser controls are independent of the Cookie settings dialog, so the cleanest way to change a category is through the dialog.

Changes and contact

We review this policy whenever a tag, pixel, SDK or storage key is added or removed, and at least annually. When the categories, vendors or purposes change materially, the policy version stored with your choice will no longer match and you will be asked to choose again. Questions about cookies, requests to see the consent log entry for your consent identifier and privacy complaints can be sent to support@cortexanote.com.