Version 2.0 — Last updated April 2026
Cookies are small text files that a website stores on your device (computer, phone, or tablet) when you visit. They allow the website to recognize your device, remember your preferences, and understand how you interact with the site. Some cookies are essential for the site to function, while others help us improve the service or measure marketing effectiveness.
We use cookies on the ExpiWell websites and in the ExpiWell web application. This Cookies Policy explains which cookies we use, why we use them, and how you can control them.
We do not set non-essential cookies until you grant consent. When you first visit our site, you will see a cookie consent banner asking you to choose which categories of cookies you allow. Essential cookies are always active because the site cannot function without them. All other categories (Functional, Analytics, Marketing) are off by default and only activate after you explicitly opt in.
You can change your preferences at any time by clicking the "Manage Cookies" link in the dashboard footer. Withdrawing consent is as easy as granting it, and any cookies in a category you withdraw consent for are automatically deleted from your browser.
We organize our cookies into four categories based on their purpose. Below is the complete list of cookies we use, their providers, purposes, and retention periods.
Essential cookies are required for the site to function correctly. They support core capabilities such as authentication, security, and recording your consent preferences. These cookies cannot be disabled.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
session | ExpiWell | User session authentication (Iron Session) | Session / 24 hours |
csrf_token | ExpiWell | CSRF protection on form submissions | Session |
ew_consent | ExpiWell | Stores your cookie consent preferences | 6 months |
_GRECAPTCHA | Google reCAPTCHA | Bot and fraud prevention on login, signup, and contact forms (legitimate interest) | 6 months |
Functional cookies remember choices you make to give you a better experience, such as your preferred language. If you do not consent to functional cookies, your language preference will still be saved to your account on our servers but will not persist in your browser between sessions.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
locale | ExpiWell | Remembers your language preference | 1 year |
Analytics cookies help us understand how visitors interact with our site so we can improve it. We use Google Analytics 4 (delivered via Google Tag Manager) to collect anonymous usage statistics such as page views, session duration, and traffic sources. These cookies only load after you opt in.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics 4 | Distinguishes unique users | 2 years |
_ga_<container-id> | Google Analytics 4 | Maintains session state | 2 years |
_gid | Google Analytics 4 | Distinguishes users (24-hour rotation) | 24 hours |
_gat | Google Analytics 4 | Throttles request rate | 1 minute |
Google Analytics is configured under Google Consent Mode v2, meaning data collection is denied by default and only activates after your explicit consent. You can also opt out of Google Analytics across all websites by installing the Google Analytics Opt-out Browser Add-on.
Marketing cookies are used to measure the effectiveness of our advertising campaigns. We use Google Ads conversion tracking (delivered via Google Tag Manager) to understand which marketing channels bring users to our service. These cookies only load after you opt in.
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_gcl_au | Google Ads (via GTM) | Conversion tracking for Google Ads | 90 days |
Marketing cookies are also covered by Google Consent Mode v2. Without your consent, no marketing data is sent to Google Ads.
For full transparency, we want to confirm that the ExpiWell web application does not use the following tracking technologies:
If we add any new tracking technology in the future, we will update this policy and re-prompt you for consent before activating it.
Each cookie has a specific retention period listed in the tables above. Cookies fall into two storage types:
Your consent preferences (the ew_consent cookie) are stored for 6 months. After this period, you will be asked to confirm your preferences again. You may also be re-prompted if we update the cookie policy in a way that materially affects what data is collected.
You have several ways to manage cookies:
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including:
For more information about how we process your personal data, see our Privacy Policy and our GDPR Policy.
We may update this Cookies Policy from time to time. When we make material changes (such as adding a new tracker or category), we will increment the version number, update the "Last updated" date at the top of this page, and re-prompt you for consent. Minor changes (such as clarifications or formatting) will be reflected without re-prompting.
If you have questions about our use of cookies or about your privacy rights, please contact us at [email protected].