This Cookie Policy explains how Meloa LLC ("we," "us," or "our") uses cookies and similar technologies (like browser local storage) on meloa.io and the Meloa app. It sits alongside our Privacy Policy and Consumer Health Data Privacy Policy.
The short version: Meloa uses a deliberately small set of cookies. We do not use advertising cookies, cross-site tracking, or third-party marketing pixels, and we never put your health data in a cookie. The only optional, non-essential cookies are product-analytics cookies, and those are off unless you turn them on.
What Are Cookies?
Cookies are small text files a site stores on your device. "Local storage" is a similar browser mechanism for keeping small amounts of data. Both let a site remember things between page loads — like keeping you signed in. We use the word "cookies" below to cover both.
Cookies can be strictly necessary (the site cannot function without them) or optional (they add something, like analytics, but you can decline them).
Cookies We Use
| Cookie / Technology | Provider | Purpose | Type | Expiry |
|---|---|---|---|---|
| sb-* (authentication) | Supabase | Keeps you securely signed in and refreshes your session. | Strictly necessary | Session + refresh cycle |
| gpc | Meloa | Records that your browser sent a Global Privacy Control opt-out signal, so we keep honoring it on every page. | Strictly necessary | Persistent |
| health_consent_pending | Meloa | A short-lived marker set during sign-up so we can timestamp your health-data collection consent at the moment you give it. | Strictly necessary | 5 minutes |
| ph_* (plus local storage) | PostHog | Product analytics — which features are used, so we can improve them. Set only if you turn on analytics sharing (off by default) and never when a GPC signal is present. | Analytics — optional, off by default | Persistent (only if you opt in) |
| __stripe_mid, __stripe_sid | Stripe | Fraud prevention while you are on a payment/checkout page. Set by Stripe only when you begin a purchase. | Strictly necessary (payment) | __stripe_mid ~1 year · __stripe_sid ~30 minutes |
We also use Sentry for error and crash diagnostics. Sentry helps us fix bugs and does not set advertising cookies; error reports are scrubbed of personal information before they leave your device.
Analytics Are Opt-In
Product-analytics cookies (PostHog) are the only non-essential cookies we use, and they are disabled by default. They are set only if both of the following are true: you have turned on analytics sharing, and your browser is not sending a Global Privacy Control (GPC) opt-out signal. If you turn analytics off — or send a GPC signal — no analytics cookie is created, and any existing one stops being used.
You can change this anytime in Profile → Privacy & Consent. Because analytics only run for signed-in users who opt in, browsing our public pages sets no analytics cookies at all.
Third-Party Cookies
The only third parties that may set cookies through Meloa are Stripe (fraud prevention, and only on a checkout page when you start a purchase) and PostHog (product analytics, only if you opt in as described above). We do not permit third-party advertising or cross-site tracking cookies on our Services. You can review these providers, and everyone else we work with, in the Privacy Policy.
How to Control Cookies
You have several independent controls:
- In-app toggle — turn analytics sharing on or off in Profile → Privacy & Consent.
- Global Privacy Control — if your browser or an extension sends a GPC signal, we automatically treat it as an opt-out of analytics and optional data sharing.
- Your browser — most browsers let you block or delete cookies in their settings. Blocking strictly necessary cookies will stop you from being able to sign in and use the app.
Changes to This Policy
We may update this Cookie Policy as our Services change. The "Last updated" date at the top reflects the most recent version. If we begin using a materially different category of cookie, we will update this page and, where required, ask for your consent first.
Contact
Questions about this Cookie Policy? Email support@meloa.io or write to Meloa LLC, 805 Neighborhood Rd, Lake Katrine, NY 12449, United States.