Cookie & Advertising Notice

Prosoma, Inc. www.prosoma.com/us
Version 1.1
Effective Date: November 4, 2026
Last Updated: November 6, 2026

At a Glance

• Our U.S. website does not use advertising pixels, social media pixels, or tag managers.
• We set only a few of our own cookies, listed in Section 3.
• If you reach us through an ad and contact us, we tell that ad platform (Google or Meta) that the ad led to an inquiry and, later, whether your intake has started. We send hashed (scrambled) contact details so the platform can match the event to its ad. We never send your name, date of birth, form answers, or medical information.
• You can turn this off at any time with the "Your privacy choices" switch, or automatically with Global Privacy Control.

1. Purpose of This Notice

This Cookie & Advertising Notice explains how www.prosoma.com/us, the U.S. website operated by Prosoma, Inc. ("Prosoma," "we," "us"), uses cookies, pixels, and similar technologies for website analytics, advertising, and outreach measurement, separately from the health information described in our Privacy Policy and Notice of Privacy Practices. This Notice supplements, and does not replace, our Privacy Policy.

We never share your health information, diagnosis, treatment details, or assessment responses with advertising or analytics partners. This Notice describes the limited information we do use for analytics and advertising measurement, explained in Sections 4 through 6.

Prosoma's international website has its own cookie notice and consent banner. Choices you make on one site do not apply to the other. This website is not a patient portal. If you enroll in a program, our Privacy Policy and Notice of Privacy Practices govern your care information.

2. What Cookies and Similar Technologies Are

A cookie is a small text file a website asks your browser to store so it can remember information, such as your privacy choice. Local storage is a similar browser feature that saves information on your device but, unlike a cookie, is not sent with each web request. Server-side events are messages our servers send directly to an advertising platform. No code from that platform runs on our website.

3. Cookies We Use

This is the complete list of cookies set on our U.S. website. Each is limited to the U.S. website (path /us) and is first-party.

Cookie	Category	Purpose	Duration
csrf_token	Strictly necessary	Protects our forms against fraudulent submissions	1 hour
prosoma_tc_spa	Strictly necessary	Keeps our enrollment and booking forms working while you complete them	8 hours
prosoma_us_optout	Strictly necessary	Remembers that you turned off analytics and advertising measurement	1 year
_cfuvid	Strictly necessary	Set by Cloudflare, our hosting provider, for security and traffic management	Session
prosoma_us_src	Advertising measurement	Remembers the campaign link that brought you here and, if you arrived from a Google or Meta ad, that ad's click identifier (see Section 5)	90 days
ph_phc_nerC6XAYNdwE7L2wE6vVHWZZ2hnQRsQPsV2CWqUX66qE_posthog	PostHog	Random device id on /us/enroll, plus local storage	1 year
prosoma_chd_optin	Our site	Washington, Nevada, and Connecticut opt-in. Written only after the person clicks opt in.	1 year
prosoma_notice_optout	Our site	Notice opt-outs. Written only after the person opts out.	1 year

Our analytics tools do not set cookies on this website. They store a random identifier in your browser's local storage instead (see Section 4). Cookies set by Prosoma's international website may be present in your browser, but our U.S. website does not read or use them.

4. Website Analytics

We use analytics tools to understand how our website is used, such as which pages are visited and which buttons are clicked. They store a random identifier in your browser's local storage. Some sessions may be recorded to help us improve the website, and anything you type is masked in those recordings. When you send us a request, we link that identifier to your request in our own records so we can see how people who contact us use the website. We do not intentionally send your name, email address, phone number, or form answers to analytics tools.

5. What We Collect for Marketing Purposes

• Cookies and similar tracking technologies placed in your browser (listed in Section 3)
• Device and browser identifiers, including your IP address and browser type (user agent) when you submit a form
• Ad click identifiers (Google gclid, gbraid, or wbraid; Meta fbclid) when you arrive by clicking one of our ads
• Hashed contact information (e.g., a securely hashed version of an email address or phone number submitted through a form on our website, prior to enrollment as a patient)
• General platform interaction data (e.g., pages visited, campaign source)

Meta lead forms: If you fill in one of our forms on Facebook or Instagram, Meta passes the details you entered (your name, email address, and phone number) to us so a Care Navigator can contact you. We handle them the same way as requests made on our website.

6. Who We Share It With

We share the limited identifiers described above with advertising partners, Meta (Facebook/Instagram) and Google Ads, to measure the effectiveness of our outreach campaigns. We share information only with the platform whose ad brought you to us, and only for these two events:

Event	When it is sent	What we send
Inquiry	You submit a callback, booking, or enrollment request on our website after clicking our ad	Ad click identifier, event type and time, hashed email address and phone number; for Meta, also your IP address and browser type, which Meta requires
Intake started	A Care Navigator begins your intake	Ad click identifier, event type and time, hashed email address and phone number

We do not send your name, date of birth, form answers, medical information, or the content of any conversation. We do not send events for people who opt out, who use Global Privacy Control, or who submit a Meta lead form (Meta already knows the form was submitted). We send Meta events with Meta's "Limited Data Use" setting, and we tell Google not to use them for ad personalization. We do not use your information to build advertising audiences or to retarget you. These partners process this information subject to their own privacy policies.

We also record which campaign link brought you to us (for example, a campaign name in the link) with your request, for internal reporting. This stays in our own records and is not shared with advertising platforms.

7. Your Choices

You can control or opt out of marketing measurement at any time:

• Your Privacy Choices switch: Use the "Your privacy choices" link in our website footer to turn "Analytics and advertising measurement" off. When it's off, we don't run analytics in your browser, we don't store ad click identifiers, and we don't share requests from that browser with advertising platforms. Your choice is remembered in that browser for one year and applies to the U.S. website only, so please repeat it on other browsers and devices. It does not affect information shared before you turned it off.
• Global Privacy Control (GPC): Enable GPC in your browser; our website is configured to automatically honor this signal as an opt-out of analytics and advertising measurement
• Cookie Preferences: Adjust your cookie settings through your browser, or clear your browser's cookies and local storage
• Email Us: support@prosoma.com

Even when the switch is off, we still record which campaign link brought you here, for internal reporting only. We do not treat Do Not Track browser signals as an opt-out because there is no common standard for them. Please use GPC or the switch instead.

Opting out of marketing cookies does not affect your ability to use the core Service, receive care, or communicate with your health coach.

8. Your Privacy Rights

California: Under the CCPA/CPRA, the use of certain advertising identifiers for cross-context behavioral advertising measurement may be considered "sharing" of personal information, even though we do not sell personal information for monetary value. You have the right to opt out of this sharing at any time using the methods described in Section 7 above.

Other states: Residents of states with comprehensive privacy laws, such as Colorado, Connecticut, Virginia, Oregon, and Texas, may have the right to opt out of targeted advertising. We treat the switch and GPC as that opt-out.

Washington, Nevada, and Connecticut consumer health data: We do not share consumer health data from residents of these states with advertising platforms without their opt-in consent.

9. Retention

Information	How long we keep it
Ad click identifiers and hashed email and phone	Deleted 90 days after the ad click
IP address and browser type sent to Meta	Deleted from our systems once the event is sent
Campaign source cookie (prosoma_us_src)	90 days
Privacy choice cookie	1 year
Analytics data	As long as necessary

Advertising and analytics identifiers are retained only as long as necessary for outreach measurement purposes, and in any case no longer than 24 months from collection, after which they are deleted or de-identified.

10. Changes to This Notice

We will update this Notice if the technologies we use change, and will post the new version with a new version number and "Last Updated" date. If we begin using a new advertising or analytics partner or sharing new types of information, we will update this Notice before the change takes effect.

Contact Us

Prosoma, Inc.

Attn: Privacy Officer

2108 N St #13468, Sacramento, CA 95816

Email: support@prosoma.com

Phone: 877-509-5978