Cookie Policy.

1. What cookies are, and the categories we use

Effective May 26, 2026. Last reviewed May 26, 2026. A cookie is a small text file that a website asks your browser to store on your device when you visit. The browser returns the cookie to the website on subsequent visits, which allows the website to recognize your browser, to remember your preferences, and to operate features that depend on session continuity. Similar technologies, including local storage, session storage, pixels, and software development kit identifiers, perform analogous functions and are addressed by this Cookie Policy where we use them.

A first-party cookie is set by the domain that you are visiting. The cookies that Hydor Health sets on hydorhealth.com are first-party cookies. A third-party cookie is set by a domain other than the one that you are visiting, usually by a service embedded inside the page (for example, a video player or an advertising network). Hydor Health does not load third-party advertising cookies on the Site. Where the Site embeds a third-party resource that may set a cookie, we use the privacy-enhanced mode of the embed where one is offered and we do not load the third-party cookie until you take an affirmative action with respect to the resource.

A session cookie expires when you close your browser. A persistent cookie remains on your device for a set period or until you delete it. The duration of every cookie we set is listed in the cookie inventory in Section 6.

This Cookie Policy is part of, and is incorporated by reference into, the Hydor Health Privacy Policy. Capitalized terms used but not defined in this Cookie Policy carry the meaning assigned to them in the Privacy Policy.

2. Strictly necessary cookies

Strictly necessary cookies are required for the Site to function and cannot be switched off through the cookie banner. They are typically set in response to actions made by you that amount to a request for a service, such as setting your communication preferences, logging into a gated portal, or filling in an inquiry form. You can configure your browser to block or alert you about strictly necessary cookies, but if you do so some parts of the Site will not work.

The strictly necessary category includes a session identifier that allows the Site to maintain state across requests, a cross-site request forgery token that protects inquiry forms against forged submissions, and an edge security token used by the web application firewall in front of the Site to distinguish a legitimate browser from automated abuse. These cookies do not collect information about you for marketing purposes and do not track your activity across other websites.

3. Analytics cookies

Analytics cookies allow us to count visits and traffic sources so that we can measure and improve the performance of the Site. They help us understand which pages are the most and least popular, how visitors move through the Site, and where requests originate. The analytics we use are privacy-respecting, first-party where possible, and do not load third-party advertising trackers.

For visitors located in the European Economic Area, the United Kingdom, or any other jurisdiction that requires prior consent for non-essential cookies, analytics cookies are off by default and will not load until you have provided consent through the cookie banner. For visitors located in jurisdictions that operate on an opt-out basis, analytics cookies are on by default and you may withdraw consent at any time through the cookie banner or through the controls described in Section 7.

Hydor Health uses a small set of analytics products that meet our privacy requirements, currently Plausible Analytics for aggregate page-level metrics and PostHog for product analytics on selected interactive surfaces. We do not load the Meta pixel. We do not load the LinkedIn Insight Tag. We do not load the Google Ads conversion tag. We do not load any advertising-network tracker on the Site.

4. Preference cookies

Preference cookies allow the Site to remember choices you make and provide an experience that is consistent with those choices on subsequent visits. The preference category includes a locale cookie that remembers the language and region you have selected, an accessibility cookie that remembers settings such as reduced motion and increased font size, and a cookie that records your cookie banner choices so that we do not ask you the same question on every page load.

Preference cookies do not collect information about you for marketing purposes and do not track your activity across other websites. You may delete a preference cookie at any time through your browser settings. If you delete a preference cookie, the Site will revert to default settings on your next visit.

5. No third-party advertising cookies

Hydor Health does not load third-party advertising cookies on the Site. We do not participate in real-time bidding. We do not maintain advertising audiences. We do not sell, rent, or otherwise transfer cookie data, browser identifiers, or device identifiers to a third party for cross-context behavioral advertising. We do not use the Site to build a profile about you for use in advertising on any other website or in any other application.

Where a future product surface introduces a different cookie posture (for example, an investor portal that requires session continuity across a third-party identity provider), the change will be reflected in the cookie inventory in Section 6, will be subject to the consent mechanism described in Section 3 where applicable, and will be announced in accordance with Section 9.

6. Cookie inventory

The following inventory lists the cookies that the Site may set, the purpose of each cookie, the duration for which it persists, and its type. Where a cookie is conditional (for example, an analytics cookie that loads only after consent is provided), the condition is reflected in the purpose.

• hydor_sessionMaintains session state across requests so that the Site can recognize a continuous visit. Duration: session (cleared when the browser closes). Type: strictly necessary, first-party.
• hydor_csrfProtects inquiry forms against cross-site request forgery by binding a form submission to the session that requested the form. Duration: session. Type: strictly necessary, first-party.
• __cf_bmEdge bot management cookie set by Cloudflare to distinguish a legitimate browser from automated abuse and to apply rate limits at the network edge. Duration: thirty minutes. Type: strictly necessary, first-party.
• hydor_consentRecords your cookie banner choices so that the Site does not display the banner on every page load and so that non-essential cookies load only where you have consented. Duration: twelve months. Type: preference, first-party.
• hydor_localeRemembers the language and region you have selected so that subsequent visits render in the locale you prefer. Duration: twelve months. Type: preference, first-party.
• hydor_a11yRemembers accessibility preferences (reduced motion, increased font size, high-contrast theme) across visits. Duration: twelve months. Type: preference, first-party.
• plausible_ignoreAllows a visitor to opt out of Plausible Analytics measurement. When present, no analytics event is recorded for the visitor. Duration: persistent until the visitor clears it. Type: analytics (opt-out), first-party.
• ph_distinct_idPostHog product analytics identifier used on selected interactive surfaces to attribute events to a single visit. Loaded only after consent is provided in jurisdictions that require prior consent. Duration: twelve months. Type: analytics, first-party (proxied).

7. How to control cookies

You have several ways to control cookies set by the Site. The most direct controls are the cookie banner and your browser. The banner appears on your first visit and remains accessible through the "Cookie settings" link in the Site footer, where you may change your choices at any time. Your browser settings allow you to block or delete cookies on a per-site basis or globally. Instructions for the most common browsers are available in the browser help documentation.

Hydor Health honors the Global Privacy Control signal at the browser level. If your browser is configured to send the Global Privacy Control signal, the Site will treat the signal as a request to opt out of any processing that would constitute a "sale" or "sharing" of personal information under the California Consumer Privacy Act as amended and any equivalent state statute that recognizes the signal. Analytics cookies will not load. Preference cookies that record opt-out state may still be set to honor your choice on subsequent visits.

The Site recognizes the Do Not Track header as a request to disable analytics. We do not, however, rely on the Do Not Track header for legal compliance because the header is not consistently implemented across browsers. The authoritative control is the cookie banner and, where present, the Global Privacy Control signal.

Disabling strictly necessary cookies through your browser will impair the operation of inquiry forms, the cookie banner itself, and the edge security layer in front of the Site. We recommend that you leave strictly necessary cookies enabled.

8. Your rights as a resident of a regulated jurisdiction

Residents of certain jurisdictions have specific rights with respect to cookies, similar technologies, and the information they collect. Hydor Health honors those rights as a matter of policy in addition to the rights enumerated in the Privacy Policy.

• Texas residentsUnder the Texas Data Privacy and Security Act, you may opt out of targeted advertising, the sale of personal information, and certain profiling activities. The Site does not engage in targeted advertising or sell personal information, and the Global Privacy Control signal is recognized as a valid opt-out for any future activity that would fall within the statute.
• Residents of the European Economic Area or the United KingdomUnder the General Data Protection Regulation and the United Kingdom Data Protection Act 2018, non-essential cookies require your prior, freely given, specific, informed, and unambiguous consent. The cookie banner provides that consent mechanism. You may withdraw consent at any time, and withdrawal is as easy as the original grant.
• California residentsUnder the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to opt out of the "sale" or "sharing" of personal information and to limit the use of sensitive personal information. The Site does not sell or share personal information and does not use sensitive personal information for purposes that would trigger the limitation right, but the Global Privacy Control signal is recognized as a valid opt-out signal for any future activity that would fall within the statute.
• All other United States residentsResidents of any state that has enacted a comprehensive consumer privacy statute will receive, as a matter of policy, the rights granted by that statute with respect to cookies and similar technologies, including the right to opt out of targeted advertising, the right to opt out of any sale of personal information, and the right to access, correct, delete, and port personal information as described in the Privacy Policy.

9. Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we set, in the services that depend on them, in applicable law, or in the regulatory guidance that interprets that law. When we do, we will post the updated Cookie Policy on this page, will update the "Last reviewed" date at the top of Section 1, and will refresh the inventory in Section 6 to match what the Site actually sets.

Where a change is material (for example, the introduction of a new analytics product or a change in the duration of a consent record), we will provide thirty days of advance notice on the Site, will re-present the cookie banner so that consent choices may be reviewed, and, where we have an email address on file for a Visitor reasonably affected by the change, will provide email notice to that address.

10. Contact the Privacy Office

For questions about this Cookie Policy, about the cookies the Site sets, or about how to exercise any right described in Section 8, please contact the Privacy Office at privacy@hydorhealth.com or by mail at Hydor Health, Attention: Privacy Office, Houston, Texas, U.S.A. The Privacy Office will respond within the timeframes set out in the Privacy Policy.

This Cookie Policy is governed by the laws of the State of Texas without regard to its conflict-of-laws principles. The exclusive forum and venue for any dispute arising out of or relating to this Cookie Policy is the state or federal courts located in Harris County, Texas. Nothing in this Cookie Policy waives any right that you hold under applicable law.