Cookie and storage notice

Necessary operations

This release has no optional advertising pixels, general marketing analytics, session replay, chat tracker or automatically loaded map or video embed. Cookie settings therefore shows a necessary-storage notice without invented optional categories. Required sign-in, security, profile, booking, payment, gift and membership actions remain available.

• InnerVital and AWS authentication: first-party protected sessions, anti-CSRF and sign-in handoff state support access and account security. Session and recovery limits are set by the relevant authentication flow; signing out clears its active session.
• Google reCAPTCHA Enterprise: requested protected forms use an isolated verification document. The verification frame cannot read the Patient document or its browser storage. Google processes security signals for the requested assessment. Cookie choices do not bypass server-side verification.
• Stripe: payment resources load when you request a supported payment or saved-card action. Stripe processes the payment information in its protected interface. Cookie choices do not authorize a charge.
• Shopify: linked botanical commerce operates under its own applicable notice when you open that service. InnerVital cookie choices are not automatically copied to that separate origin.
• InnerVital preferences: Cookie settings uses origin-scoped localStorage, including iv.cookie.preferences and stcm.innervital.20261017.*. Our preference record expires after 180 days, or becomes invalid when its policy version changes. This is a product setting, not a claim about a universal legal interval.

Your browser choices

Cookie settings is available in the footer without sign-in. If approved optional tools are added, they must be disclosed and blocked until the relevant permission is recorded. Rejection and acceptance use the same preference period. A Global Privacy Control signal cannot be overridden by a generic acceptance for sale, sharing or targeted advertising. No such program is active in this release.

If browser storage is denied or fails, optional collection remains off. Withdrawing an optional purpose stops future collection and clears storage controlled by that purpose where feasible; a reload may be needed to unload its code. InnerVital cannot erase storage owned by another origin. Necessary sign-in, payment and account preferences are not deleted by cookie withdrawal.

Patient privacy and environment separation

Patient and Staff experiences, booking, payment and sensitive referral flows do not load advertising, remarketing, session replay or general marketing analytics. Entering these applications uses a separate document. Cookie consent is not permission to disclose clinical information.

Choices on innervital.com belong to this origin and browser. They do not grant permission on another origin or device. Choices from a separate testing environment are not copied here.

We self-host the open-source Silktide consent interface. It does not require an account or send your choices to Silktide. The current tools and data-flow inventory must be reviewed again before any optional purpose is introduced.

See the Privacy Policy, Messaging Terms, or contact InnerVital.