Latest version date: 30th July 2026
This policy explains how Ona Health Solutions Inc. (“Ona”, “we”, “us”) uses cookies and similar technologies, and what choices you have.
It applies to:
ona.health and our other public web pages, including marketing, blog, help and pricing pages; and
the Ona platform, meaning the pages you reach after logging in, and the patient portal.
The two are treated differently, and Section 3 explains how.
For how we handle personal information more broadly, see our Platform Privacy Policy. If you are a Washington or Nevada resident, see also our Consumer Health Data Privacy Policy.
A cookie is a small text file placed on your device when you visit a website, allowing the site to recognise your browser on a later visit.
Session cookies last until you close your browser.
Persistent cookies remain until they expire or you delete them.
First-party cookies are set by Ona. Third-party cookies are set by another company through our pages.
We also use similar technologies that work in comparable ways:
| Technology | What it does |
|---|---|
| Pixel tags and web beacons | Small pieces of code that record that a page or email was opened, and pass information to a third party |
| Local storage | Stores data in your browser, often to keep you signed in or remember settings |
| Software development kits (SDKs) | Code inside a mobile application that performs similar functions to cookies |
Where this policy says “cookies”, it means cookies and these similar technologies together.
3.1 Where advertising and analytics technology is used. We state this plainly because it matters for a healthcare product:
Advertising cookies operate only on our public marketing pages.
We do not place advertising cookies inside the logged-in Ona platform, in the patient portal, or on any page that displays or is connected to patient information.
We do not use session-replay or screen-recording technology anywhere in the platform or patient portal.
3.2 The categories.
| Category | What it does | Where | Consent needed |
|---|---|---|---|
| Strictly necessary | Authentication, session management, security, fraud prevention, load balancing, remembering your cookie choices | Marketing site and platform | No — the service cannot function without these |
| Functional | Remembering preferences such as language, layout and dismissed messages | Marketing site and platform | Yes |
| Analytics | Measuring page performance, diagnosing errors, understanding which features are used | Marketing site; limited, privacy-preserving use in the platform | Yes |
| Advertising | Measuring marketing campaigns and showing you Ona ads on third-party sites, including social media platforms | Marketing pages only | Yes |
Strictly necessary cookies are set without consent because the service cannot be delivered without them. Every other category is off until you turn it on.
Some cookies are set by other companies when you visit our public pages, principally for analytics and advertising. Those companies handle the data they collect under their own privacy policies, and we do not control their practices.
We do not publish a cookie-by-cookie inventory, because cookie names and durations change when providers update their software and a stale list would be misleading. A current list of the cookies we set and the third parties that set cookies through our pages is available on request from [email protected], and our consent banner identifies the categories in use at the time you visit.
We do not permit third parties to set advertising cookies inside the platform or patient portal.
5.1 The consent banner. When you first visit our public pages you are shown a banner. Non-essential cookies are not set until you accept them. You can accept all, reject all, or choose categories individually. Rejecting is as easy as accepting.
5.2 Changing your mind. Use the Cookie Settings link in our website footer at any time to change your choices or withdraw consent. Withdrawing consent stops future collection; it does not undo collection that already occurred.
5.3 Global Privacy Control and opt-out preference signals. We honour the Global Privacy Control (“GPC”) signal. Where your browser or extension sends GPC, we treat it as a valid instruction to opt out of advertising cookies and of any sharing of personal information for cross-context behavioural advertising, and we apply it automatically without requiring you to interact with the banner.
5.4 Browser and device controls. Most browsers let you block or delete cookies, and mobile operating systems usually offer a setting to limit interest-based advertising. These controls sit outside our website, so using them may affect other sites too. Blocking strictly necessary cookies will prevent the platform from working.
5.5 If you are using a practice’s workspace. Your practice’s administrator may configure certain platform settings. Cookie choices you make in your browser remain yours.
Cookie and page-view data collected on our public pages could, in some circumstances, support an inference about a health interest — for example if you visit pages describing a clinical specialty. For residents of Washington and Nevada, that may be consumer health data under state law, which requires separate opt-in consent before it is collected and before it is shared.
Where required, we ask for that consent separately in the banner rather than bundling it with acceptance of this policy. See our Consumer Health Data Privacy Policy for the rights that apply and how to exercise them.
Patient information inside the platform and patient portal is protected health information under HIPAA and is not consumer health data. It is governed by HIPAA and by the Business Associate Agreement between Ona and the practice.
We may update this policy to reflect changes in the technologies we use or in the law. We will update the version date above, and where a change materially affects how we collect or share your information, we will seek fresh consent rather than rely on your earlier choice.
Ona Health Solutions Inc.
28 Geary Street, Suite 650
San Francisco, CA 94108
United States