Cookies help us give you a better experience — and you're always in control.
This policy explains exactly what cookies and similar technologies VitalPulse uses, why we use them, and how you can manage or remove them at any time. We use the interactive consent manager below — in Section 6 — to let you set your preferences with one click.
What Are Cookies?
Cookies are small text files that a website places on your device (computer, phone, or tablet) when you visit. They are widely used to make websites work more efficiently, to remember your preferences, and to provide information to website owners about how their site is being used.
Cookies contain a small amount of information — typically a unique identifier and the name of the website that set it. They are not programs and cannot carry viruses or install software on your device.
Types of Cookie by Duration
| Type | Duration | What it does |
|---|---|---|
| Session cookies | Deleted when you close your browser | Maintain your state while you navigate — e.g. keeping you logged in as you move between pages |
| Persistent cookies | Remain for a set period (days to years) | Remember your preferences across visits — e.g. your language or cookie consent choices |
Types of Cookie by Origin
| Type | Who sets it | Example |
|---|---|---|
| First-party cookies | Set directly by VitalPulse | Our session cookie, your saved preferences |
| Third-party cookies | Set by services we embed | Google Analytics, Google AdSense |
Why We Use Cookies
We use cookies for four main purposes. Essential cookies are necessary for the Service to function and are always active. All other categories are optional and require your consent under the Pakistan Privacy and Electronic Communications Regulations (PECR) and the EU ePrivacy Directive.
| Purpose | Legal basis | Can you opt out? |
|---|---|---|
| Essential operation — keeping you logged in, security, load balancing | Legitimate interests / Strictly necessary | No — disabling these breaks the Service |
| Functional preferences — remembering your settings, dismissed banners | Consent | Yes — in the consent manager below |
| Analytics & performance — understanding how the site is used | Consent | Yes — in the consent manager below |
| Advertising — enabling relevant ads via Google AdSense | Consent | Yes — in the consent manager below |
Categories of Cookies We Use
Click any category below to expand it and see exactly which cookies we use, what they do, and how long they last.
Full Cookie List
The table below provides a complete list of all cookies currently set by VitalPulse and our partners, sorted by category. This list is reviewed and updated quarterly.
Last scanned: 15 June 2026 · Next review: 15 September 2026
| Name | Category | Provider | Purpose | Duration | Type |
|---|---|---|---|---|---|
| vp_session | Essential | VitalPulse | Session management | Session | First-party |
| vp_csrf | Essential | VitalPulse | Security | Session | First-party |
| vp_cookie_consent | Essential | VitalPulse | Consent record | 1 year | First-party |
| __cf_bm | Essential | Cloudflare | Bot protection | 30 min | Third-party |
| _cfuvid | Essential | Cloudflare | Rate limiting | Session | Third-party |
| vp_prefs | Functional | VitalPulse | Display preferences | 6 months | First-party |
| vp_dismissed | Functional | VitalPulse | Notice dismissals | 3 months | First-party |
| vp_nl_closed | Functional | VitalPulse | Newsletter prompt | 30 days | First-party |
| _ga | Analytics | Unique user ID | 2 years | Third-party | |
| _ga_XXXXXXXX | Analytics | Session state | 2 years | Third-party | |
| _gid | Analytics | Daily unique users | 24 hours | Third-party | |
| _gat | Analytics | Request throttling | 1 min | Third-party | |
| vp_scroll_depth | Analytics | VitalPulse | Scroll measurement | Session | First-party |
| __gads | Marketing | Ad frequency | 1 year | Third-party | |
| __gpi | Marketing | Ad preferences | 1 year | Third-party | |
| NID | Marketing | User preferences | 6 months | Third-party | |
| DSID | Marketing | Ad personalisation | 2 weeks | Third-party | |
| IDE | Marketing | Campaign measurement | 1 year | Third-party |
Third-Party Cookies
We use a small number of carefully selected third-party services that may set cookies on your device. These are listed below with links to their own cookie and privacy policies.
| Provider | Service | Cookie types | Their policy |
|---|---|---|---|
| Google LLC | Google Analytics 4 — website analytics | Analytics | Google Privacy Policy |
| Google LLC | Google AdSense — display advertising | Marketing | Google Ads Policy |
| Cloudflare, Inc. | CDN, DDoS protection, WAF | Essential | Cloudflare Privacy |
| The Rocket Science Group (Mailchimp) | Email newsletter delivery | Functional (email only) | Mailchimp Privacy |
We are not responsible for the cookies set by third-party providers. For information about how they use cookies and how to opt out, please visit their respective policies linked above.
Google's Advertising Settings
You can control Google's use of your data for advertising purposes directly via Google's tools:
- Google Ads Settings — manage your personalized advertising preferences for Google services.
- Google My Ad Center — customize the ads you see across Google services and participating websites.
- Network Advertising Initiative (NAI) Opt-Out — opt out of interest-based advertising from participating advertising networks.
- Digital Advertising Alliance (DAA) WebChoices — manage interest-based advertising preferences from participating companies.
Manage Your Cookie Preferences
Use the consent manager below to control which categories of optional cookies VitalPulse uses. Your preferences are saved immediately and applied on your next page load. You can change your mind at any time by returning to this section.
Browser Controls
In addition to using our consent manager, you can control cookies directly through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies, or receive a notification when a cookie is sent.
For more detailed instructions, visit allaboutcookies.org, which provides step-by-step guidance for all major browsers and devices.
Local Storage & Similar Technologies
In addition to cookies, VitalPulse uses browser local storage and session storage to store data directly on your device. These technologies work differently from cookies — they do not expire automatically and are not sent to our servers with each request — but they serve similar purposes.
How VitalPulse Uses Local Storage
| Key | What it stores | Why | Storage type |
|---|---|---|---|
| vp_cookie_prefs | Your cookie consent choices | So we remember your preferences without a server round-trip | localStorage |
| vp_journal_entries | Journal entries you write in our journaling tool | Keeps your private writing on-device only — never sent to servers | localStorage |
| vp_mood_history | Mood tracker entries | Stores your mood log locally for privacy | localStorage |
| vp_habit_tracker | Habit tracking data | Persists your habits and tick marks locally | localStorage |
| vp_breath_history | Breathing session records | Local session history for your breathing tool | localStorage |
| vp_planner_* | Self-care ritual progress | Today's ritual completions and streak data | localStorage |
Clearing Local Storage
You can clear local storage data through your browser's developer tools or by clearing your browser's site data. Instructions vary by browser — search for "clear site data [your browser name]" for step-by-step guidance.
Note that clearing local storage will permanently delete any journal entries, habit data, and preferences you have saved in VitalPulse's interactive tools. This data is not recoverable from our servers.
Web Beacons
Some of our emails may contain a small transparent image called a web beacon (also known as a tracking pixel). Web beacons tell us whether an email has been opened and may record your IP address, browser type, and when the email was opened. You can prevent web beacons from functioning by disabling images in your email client.
Do Not Track
Our current position on Do Not Track (DNT)
Some browsers include a "Do Not Track" (DNT) feature that sends a signal to websites requesting that your browsing not be tracked. Because there is currently no universally accepted technical standard for how websites should respond to DNT signals, VitalPulse does not currently alter its data collection or use practices in response to DNT signals. We will revisit this position if an industry standard emerges. In the meantime, please use our consent manager in Section 6 to control cookie use.
Global Privacy Control (GPC)
VitalPulse is committed to protecting your privacy and keeping our practices up to date with evolving privacy standards. We regularly review emerging technologies, including Global Privacy Control (GPC), and will update this Cookie Policy if we implement support for such standards in the future.
International Transfers
Some of the cookies set by our third-party providers — particularly Google — may result in data being processed in the United States or other countries outside the Pakistan/EEA. Where this occurs, we ensure appropriate safeguards are in place:
- Google LLC participates in the EU-US Data Privacy Framework for applicable international data transfers.
- Cloudflare processes data under Standard Contractual Clauses (SCCs) and other appropriate safeguards where required by law.
- We take reasonable steps to ensure that personal data transferred outside Pakistan is protected through appropriate contractual and security measures.
For more information about international data transfers and the safeguards in place, please see our Privacy Policy — Section 12.
Children
VitalPulse is not directed at children under 16. We do not knowingly use cookies to collect personal data from children under 16. If you believe a child has used the Service and cookies have been set, please contact us at privacy@vitalpulse.com and we will take appropriate steps.
Parents and guardians who supervise children aged 13–16 using the Service should review this Cookie Policy with them and manage browser cookie settings accordingly. See Section 7 for browser-specific instructions.
Changes to This Policy
We review and update this Cookie Policy at least quarterly to reflect any changes in the cookies we use, changes in applicable law, or changes in our practices. When we make changes:
- We update the "Last updated" date at the top of this page
- We increment the version number in the sidebar
- For significant changes, we display a notice on the website and, where appropriate, email registered users
- If new cookie categories are introduced that require consent, we will prompt you again through our consent manager
Version History
| Version | Date | Changes |
|---|---|---|
| 2.3 (Current) | 22 July 2026 | Updated cookie categories, added Global Privacy Control (GPC) support, expanded local storage documentation, updated analytics cookies, and revised the policy for Pakistan-based operations and international visitors. |
| 2.2 | 15 June 2026 | Added Mailchimp to the third-party services list, updated Google Analytics 4 (GA4) cookie information, and improved cookie consent preferences. |
| 2.1 | 1 January 2026 | Reorganized cookie categories, enhanced transparency for analytics and advertising cookies, and introduced a user-friendly cookie preference manager. |
| 2.0 | 1 March 2024 | Major revision including a complete cookie inventory, category-based cookie tables, migration to Google Analytics 4 (GA4), and improved explanations of essential, analytics, and advertising cookies. |
Contact Us
If you have questions about this Cookie Policy, want to request a full list of cookies, or have concerns about how we use tracking technologies, please contact us through any of the channels below. We aim to respond within 5 working days.
VitalPulse Privacy Team
For cookie policy questions, consent withdrawal requests, and tracking technology enquiries.