1. About this notice#
1.1 This Cookie Notice explains how Narbis, Corp., a Delaware corporation ("Narbis", "we", "us" or "our") uses cookies and similar technologies on narbis.com and narbis.shop (together, the "Site") and in the Narbis mobile apps for iOS and Android (the "Apps").
1.2 This notice sits alongside the Narbis Privacy Policy, which explains everything else we do with personal information, and the Narbis Consumer Health Data Privacy Policy, which covers health data specifically. Read this notice with those documents. Where this notice describes a consent mechanism and the Privacy Policy describes a right, both apply.
1.3 This notice describes the categories of technology we may use and the rules we apply to each one. A category listed here is used only when it is actually deployed on the Site and, where consent is required, only after you have given it. If a category is listed below but is not in use when you visit, no cookies in that category are set, and our consent tool shows that category as inactive.
2. What cookies and similar technologies are#
2.1 A cookie is a small text file that a website asks your browser to store on your device. When you return, the browser sends the file back, so the site can recognize the browser, remember a setting, or measure how a page performed.
2.2 "Similar technologies" means anything that reads from or writes to your device for the same kinds of purpose, including:
a. local storage and session storage, which hold small amounts of data in the browser;
b. pixels, tags and web beacons, which are tiny images or snippets of code in a page or an email that record that the page or email was opened;
c. software development kits (SDKs) included in a mobile app; and
d. mobile advertising identifiers and other device identifiers.
2.3 Cookies are described as first party when they are set by the Narbis domain you are visiting, and third party when they are set by another organization whose service is running on the page. They are described as session cookies when they are deleted as soon as you close the browser, and persistent cookies when they remain until they expire or you delete them.
2.4 We use these technologies to make the Site work, to remember your choices, to keep your account and your order secure, and, where you consent, to understand how the Site is used and to measure our marketing.
3. The categories we use#
| Category | What it does | Consent required | Typical duration |
|---|---|---|---|
| Strictly necessary | Delivers the Site and the features you ask for: routing and load balancing, session management, keeping you signed in, the shopping cart and checkout, payment fraud prevention, form and security tokens, and recording your cookie preference itself. The Site cannot function without these. | No. Set on every visit because they are essential. | Session, up to 12 months for security and load balancing cookies, and 6 months for the record of your cookie preference. |
| Functional | Remembers choices you make so the Site behaves the way you left it: language and region, currency display, accessibility settings such as increased text size or reduced motion, whether you have dismissed a banner, and support chat continuity. | Yes. Opt in. | Session to 12 months. |
| Analytics | Measures how the Site is used in aggregate: pages viewed, time on page, referring source, device and browser type, errors encountered, and how far people get through checkout. Used to fix problems and improve pages, including the science and support pages. | Yes. Opt in. | Session to 24 months, depending on the vendor. |
| Marketing | Measures the performance of Narbis advertising and email, attributes a purchase to the campaign that led to it, and supports audience building and retargeting on third party platforms. | Yes. Opt in. | Session to 13 months. |
3.1 Strictly necessary cookies are the only category that operates without your consent, and even those are limited to what is genuinely required to deliver the Site.
3.2 We do not place analytics or marketing technologies on any page or in any flow used by a trainee under 13, and the under 13 experience is designed to run with no third party SDKs.
4. How we ask for consent#
4.1 Consent is required for every category other than strictly necessary, and we obtain it by an affirmative act. When you first visit the Site, a consent banner appears. Nothing in the functional, analytics or marketing categories is set until you make a choice in that banner or in the preference center behind it.
4.2 The banner offers, with equal prominence, a way to accept all categories, a way to reject all non essential categories, and a way to open the preference center and choose category by category. Rejecting is exactly as easy as accepting, and takes no more clicks.
4.3 We do not treat any of the following as consent, and we never will:
a. continuing to browse the Site, scrolling, or navigating to another page;
b. hovering over, swiping past, or closing the banner without making a choice;
c. a pre ticked box, a toggle that is switched on by default, or a slider preset to accept;
d. silence, inactivity, or the passage of time; or
e. acceptance of the Website Terms of Use, the End User License Agreement, or any other Narbis agreement. Cookie consent is never bundled into acceptance of a contract.
4.4 We record what you consented to, when, and which version of the banner you saw, so that we can demonstrate your consent. That record is kept in the strictly necessary category.
4.5 If you make no choice, only strictly necessary technologies operate, and the banner will ask again on a later visit.
5. Withdrawing consent and changing your preferences#
5.1 You can change or withdraw your consent at any time, and it is as easy to withdraw as it was to give.
5.2 On the Site. Open the Cookie preferences link in the footer of every page, or the cookie icon shown on the Site. Change any category toggle and save. Withdrawal takes effect immediately for future collection, and we instruct the relevant vendors to stop.
5.3 In your browser. Every major browser lets you block or delete cookies through its settings, and lets you clear local storage. Blocking strictly necessary cookies will break sign in, the cart and checkout.
5.4 In the Apps. Open Settings, then Privacy, to change analytics and marketing choices. Device level controls also apply, described in the section titled Mobile apps and device identifiers.
5.5 Withdrawing consent does not make past lawful processing unlawful. To ask us to delete data already collected, or to exercise any other right, use the rights process in the Privacy Policy or write to info@narbis.com.
6. How long your preference lasts#
6.1 Your cookie preference expires 6 months after you set it. When it expires, the banner appears again and we ask you afresh. We do not treat a preference as valid indefinitely.
6.2 We will also ask again before that, if we add a new category or a new purpose, if we add a vendor whose processing is materially different from what you consented to, or if you clear your cookies, use a different browser, or use a different device.
6.3 A withdrawal of consent is honored immediately and is not overridden by the 6 month cycle: after you withdraw, the category stays off until you turn it back on.
7. Global Privacy Control and Do Not Track#
7.1 Global Privacy Control. Narbis honors the Global Privacy Control (GPC) signal. If your browser or extension sends GPC, we treat it as a valid request to opt out of the sale and sharing of personal information and of targeted advertising, and we automatically switch off the analytics and marketing categories for that browser. You do not need to do anything else, and we will not ask you to confirm.
7.2 Do Not Track. Narbis also honors the Do Not Track (DNT) browser signal. If your browser sends DNT, we treat it the same way as GPC and do not set analytics or marketing technologies for that browser. This is a deliberate choice: DNT has no agreed industry standard and many operators state that they ignore it. We do not.
7.3 GPC and DNT are browser and device specific. If you use another browser or device, send the signal there too, or set your preference in the banner.
7.4 An opt out signal does not disable strictly necessary technologies, because the Site cannot be delivered without them.
8. Third party analytics and marketing services, and how to opt out#
8.1 Where the analytics or marketing categories are enabled and you have consented, a limited number of third party providers may set cookies or receive information about your visit. This can include an analytics provider, a tag management tool that controls which tags load, an advertising platform used to measure campaigns, and the payment and fraud prevention services used at checkout, which sit in the strictly necessary category.
8.2 Every such provider is named in the preference center, with its purpose, the cookies it sets and their duration, and a link to its own privacy notice. The preference center is the authoritative, current list. This notice describes the rules, and the preference center describes what is running today.
8.3 We contractually require analytics and marketing providers to process data only on our instructions, to keep it separate from their other business, and not to use it to build their own profiles of you where the law requires that restriction. Where a provider would act for its own purposes, we treat that as sharing that requires your separate consent.
8.4 How to opt out.
a. Turn the analytics or marketing category off in the Narbis preference center. This is the most reliable method and it covers every vendor in that category.
b. Send a GPC or DNT signal, which we honor automatically.
c. Use the vendor's own opt out mechanism, where it offers one. The link is given next to the vendor in the preference center.
d. Use your device level advertising controls, described in the section titled Mobile apps and device identifiers.
e. Use industry opt out pages operated by the Digital Advertising Alliance, the Network Advertising Initiative and the European Interactive Digital Advertising Alliance. Those pages set their own opt out cookies, so they stop working if you clear your cookies.
8.5 We use analytics in an aggregated, measurement focused way. We do not use analytics data to make an automated decision that has a legal or similarly significant effect on you.
8a. The specific technologies in use, by name#
8a.1 This section names every cookie and tag we actually set or load, verified on 10 September 2026. If a technology is not listed here, it is not in use.
On narbis.com
| Name | Category | Set by | Purpose | Duration |
|---|---|---|---|---|
narbis_consent |
Strictly necessary | Narbis | Records your cookie preference so we do not ask again on every page | 183 days, which is the 6 months described in section 6 |
Google Analytics 4, property G-8DMT9YGC22 |
Analytics | Aggregate measurement of site usage | Up to 24 months | |
| Google Fonts | Strictly necessary | Delivers the typefaces the Site is set in. Sets no cookie, but your IP address reaches Google when a font loads | Not applicable |
8a.2 Google Analytics does not load until you consent. The tag is not present in the page we serve you. It is injected only after you accept the analytics category, so declining means no request is ever made to Google's analytics servers, rather than a request being made and then ignored.
8a.3 Google Signals is switched off and advertising personalization features are disabled, so your analytics data is not joined to a Google advertising profile.
8a.4 We use no tag manager. A Google Tag Manager container was deployed on an earlier version of this Site. It has been removed and no container is live.
8a.5 We run no advertising, conversion, retargeting or affiliate tags. No Meta Pixel, no Google Ads conversion tag, no affiliate tracking. The Marketing row in the table in section 3 stays in that table because the category may be used in future, and if it is we will ask for your consent before anything in it is set.
8a.6 We run no session recording, heatmap or session replay tool, and no support chat widget.
On narbis.shop
8a.7 The store runs on Shopify. Shopify sets its own cookies to run the cart, the checkout, session security and fraud prevention. Those are strictly necessary to sell you something and are set on every visit. Payment is processed by Stripe, which sets cookies at the payment step for fraud prevention. Shopify's own cookie information is published in its privacy documentation, and Stripe publishes a cookie notice of its own.
8a.8 We do not run analytics or marketing tags on the store.
9. Neurophysiological Data is never collected by cookies#
9.1 No Neurophysiological Data is ever collected by cookies or any similar technology, and no Neurophysiological Data is ever used for advertising. "Neurophysiological Data" means Neural Data, Cardiac Data and Derived Metrics together, as those terms are defined in the Privacy Policy. It is your EEG and cardiac signal data and the scores and summaries computed from it.
9.2 Neurophysiological Data is sensitive data and consumer health data under Washington, Nevada, Connecticut and California law. It travels from your Narbis glasses, ear clip or other compatible sensor to the Narbis Apps and to your account, on a path that has nothing to do with the Site's cookies. No cookie, pixel, tag, SDK or advertising identifier reads it, receives it or infers it.
9.3 Specifically, and without qualification:
a. we do not put Neurophysiological Data into any analytics or marketing tool;
b. we do not use Neurophysiological Data, or any score or state derived from it, to select, target, personalize or measure an advertisement;
c. we do not share Neurophysiological Data with advertising networks or data brokers;
d. we do not sell Neurophysiological Data; and
e. we do not build advertising audiences or lookalike audiences from Neurophysiological Data, or from the fact that you use a particular training protocol.
9.4 Marketing measurement is limited to Site and campaign behavior, such as which advertisement you clicked and whether a purchase followed. It never reaches into training data.
10. Mobile apps and device identifiers#
10.1 The Apps do not use browser cookies, but they can use local storage, SDKs and device identifiers for equivalent purposes.
10.2 App tracking. On iOS, we request permission through the App Tracking Transparency prompt before any tracking that uses the Identifier for Advertisers, and we do not track you if you decline. On Android, you can reset or delete your advertising ID, and opt out of ad personalization, in the device settings.
10.3 Diagnostics and crash reporting are used to keep the Apps working. Crash and performance reports do not include Neurophysiological Data.
10.4 In app analytics and marketing choices are made in Settings, then Privacy, in the App, and take effect immediately. Device level settings always take precedence over an in app choice.
11. Changes to this notice#
11.1 We update this notice when the technologies we use change. The version in force is the one published on narbis.com with the Last Updated date above.
11.2 If a change introduces a new purpose or a new category, we ask for your consent again before that change takes effect. We do not rely on an old consent for a new purpose.
12. How to reach us#
If you have a question about this notice, or about how a specific cookie or tag is used, contact us. Questions about your data rights go to the privacy mailbox.
How to reach us
Email: info@narbis.com
Web: narbis.com/contact
One mailbox handles everything. To help us route your message quickly, please begin your subject line with one of these words where it applies: Privacy, Legal, Practitioner, Security or Appeal. We read everything either way.