Cookie Policy

NeuroHaul ("we," "us," or "our") uses cookies and similar technologies — including your browser's local storage and session storage — on our public website (neurohaul.com) and in our application (app.neurohaul.com). We use them to keep you signed in, protect our forms from automated abuse, remember the U.S. state your connection appears to come from, remember your privacy choices, measure traffic and performance where enabled, understand how our pages are used where enabled, and find and fix errors. This Cookie Policy explains what we use, why, and your choices regarding their use.

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They allow the site to recognize your device and remember your preferences or actions over time.

Local storage and session storage are similar features of your browser. Session storage is cleared when you close the tab; local storage stays until you clear it.

We use cookies and similar technologies for the following purposes:

• Essential — signing in: When you sign in to the NeuroHaul application, your session is stored in a cookie on app.neurohaul.com named sb-…-auth-token (split into numbered parts, such as sb-…-auth-token.0 and .1, when it is large). While you complete a sign-in link sent to your email, a second cookie ending in -code-verifier is set briefly. The session cookie is set to last up to 400 days and is removed when you sign out. These cookies are set only when you sign in, and the application cannot work without them.
• Essential — protecting our forms: Cloudflare Turnstile checks that submissions to our public forms come from a person rather than an automated program. It loads on pages that contain one of our forms and sets no cookies on neurohaul.com.
• Essential — your privacy choice: If you save a choice, a first-party cookie named nh_consent records the current choice version, whether Analytics and Experience insights are enabled, and when you saved it. It lasts up to 180 days, uses SameSite=Lax and is Secure on HTTPS. On neurohaul.com it is shared with its subdomains, including app.neurohaul.com; on preview or local hosts it stays on that host. We do not set it merely because you visit from the United States or another region that has no first-visit prompt.
• Functional — your state: On most pages of our public website we set a cookie named nh_region containing the two-letter code of the U.S. state your connection appears to come from, based on your IP address. It lets our coverage map open on your state and expires after 7 days. It is not set for visitors outside the United States, or on our carrier directory pages.
• Functional — tools you use: If you tick items on our Broker Vetting Checklist, your ticks are saved in your browser's local storage under the name nh-broker-vetting-v1, so they are still there when you come back. Nothing is saved until you tick an item, and it is not sent to us. In the signed-in application, display preferences such as the color theme and table layout are saved in local storage in the same way.
• Optional Analytics: When enabled, Google Analytics sets _ga and _ga_<ID> cookies, Vercel Web Analytics and Vercel Speed Insights send cookieless measurements, and Sentry Replay may keep sentryReplaySession in session storage. Google Analytics runs only on the public website, and its cookies are set for neurohaul.com and its subdomains, so your browser may also send them to app.neurohaul.com, where the tag does not use them. Section 4 describes each tool. Sentry error reporting continues when optional Analytics is off.
• Optional Experience insights: When enabled, Microsoft Clarity runs only on our public website. It may set _clck and _clsk cookies for neurohaul.com and its subdomains, keep _cltk in session storage, and set cookies on Microsoft's domains, including MUID. Its first-party cookies may also be sent to app.neurohaul.com, where Clarity does not run. Section 4 describes Microsoft's use.
• Advertising & Targeting: We have not installed advertising or retargeting pixels, such as Google Ads, Meta or LinkedIn tags. Two of the analytics tools we use come from companies that also run advertising businesses, Google and Microsoft, and section 4 explains what each may do with the information it collects.

These are the third-party tools available in your browser when you use our website or application. Optional tools run only when the applicable privacy choice permits them:

• Google Analytics 4 (Google), on our public website only — measures traffic sources, page views and which pages lead to enquiries. It sets _ga and _ga_<ID>, which last up to two years (your browser may shorten this). Our tag asks Google not to use your data for ad personalization. To learn how Google collects and processes this data, see "How Google uses information from sites or apps that use our services" at https://policies.google.com/technologies/partner-sites.
• Microsoft Clarity (Microsoft), on our public website only when Experience insights is enabled — heatmaps, scroll depth and session replay, so we can see where pages confuse people. Clarity provides masking controls; the exact setting is controlled in Microsoft's dashboard. It sets _clck (one year) and _clsk (one day), and Microsoft may also set its own cookies on its domains, including one named MUID, which Microsoft says it uses for advertising, site analytics and other operational purposes. Microsoft collects or receives personal data through Clarity to provide Microsoft Advertising and may use it for its own purposes, as described in the Microsoft Privacy Statement at https://privacy.microsoft.com/en-us/privacystatement.
• Cloudflare Turnstile (Cloudflare), on pages with one of our forms — bot protection. To tell people from automated programs, Cloudflare processes technical information such as your IP address and browser details. It sets no cookies on neurohaul.com.
• Vercel Web Analytics and Vercel Speed Insights (Vercel), on our website and in our application when Analytics is enabled — count page views and measure page speed without setting cookies. They may also record that one of our forms was submitted, without your name, contact details or company.
• Sentry (Sentry), on our website and in our application — reports errors and measures performance without setting cookies. When Analytics is enabled, Sentry Replay may keep sentryReplaySession in session storage. If an error occurs while Replay is active, it may send a recording of the page covering about a minute before the error and the rest of your visit, with on-page text and anything you type masked and images blocked.

If you visit from the European Economic Area, United Kingdom or Switzerland, or if we cannot determine your region, optional Analytics and Experience insights are off until you choose. The first notice offers Accept all, Reject optional and Preferences. Other visitors, including those in the United States, do not see a first-visit banner by default. Any choice you explicitly save continues to apply. You can open Privacy choices in the public footer or signed-in app sidebar to change or withdraw it, and you can also disable cookies in your browser. Strictly necessary cookies are essential for the site's functionality: if you block cookies for app.neurohaul.com, you will not be able to sign in.

• Chrome: Settings > Privacy and security > Cookies and other site data
• Safari: Preferences > Privacy
• Firefox: Options > Privacy & Security

We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons.

If you have any questions about our use of cookies, please contact us at:

• Email: info@neurohaul.com
• Website: neurohaul.com