Cookie Policy
Last updated: May 28, 2026
What this page covers
This Cookie Policy explains what cookies and similar technologies PactRX, LLC ("PactRX," "we," "us") uses on pactrx.com and our patient, care partner, and admin portals, why we use them, and how you can control them. It is a companion to our Privacy Policy.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies include localStorage, sessionStorage, and pixels. In this policy we use "cookies" to mean all of them.
Cookies can be first-party (set by PactRX) or third-party(set by another company on our behalf). They can be session cookies (deleted when you close your browser) or persistent (kept for a set period). We tell you which kind each cookie is in the inventory below.
Our approach
PactRX runs on a strict cookie posture because we are a HIPAA-covered specialty pharmacy. Concretely:
- Strictly necessary cookies only by default. Anything beyond what is required to make the site work is off until you opt in through the cookie banner.
- Opt-in everywhere. Our consent banner uses an opt-in model regardless of where you are located, so you get the same protections as a visitor from the EU or UK.
- Marketing-only on analytics and advertising. When we load analytics or advertising tags, they run only on marketing pages (home, About, How It Works, For Caregivers, blog, FAQ, legal pages). They are server-side blocked from loading on enrollment, contact, upload, refill, and every authenticated portal page. This block cannot be overridden by configuration.
- Every tag is registered and audited. Each analytics or advertising tag we deploy is registered in an internal system controlled by a small group of administrators, with a written justification, the consent category it belongs to, and the pages it may load on. We do not use Google Tag Manager or any other tool that would let tags load without going through this registry.
- Categorical no on the highest-risk categories. We do not use session-replay tools (FullStory, Hotjar, LogRocket, Microsoft Clarity), heatmap tools, third-party A/B testing platforms, or third-party chat widgets. Our voice and text chat is powered by ElevenLabs under a Business Associate Agreement.
- You can withdraw consent at any time from the banner or by clearing the consent cookie in your browser.
Cookie categories
Strictly Necessary
Required for the website and portals to work. You cannot turn these off because the site would not function without them. Examples: authentication, security tokens, load balancing, the consent record itself.
Preferences
Remember choices you make so the experience matches your last visit. Example: your selected language. These do not track you across sites or devices.
Analytics
Help us understand how visitors use our marketing pages so we can improve them. When enabled, analytics tags run only on marketing pages and never on enrollment, contact, upload, or any portal page. The list of active analytics tags is published below in the cookie inventory; if it is empty, no analytics tag is currently active. New analytics tags will not load until you opt in.
Marketing
Help us measure which ads drive enrollments and reach people who would benefit from our service. When enabled, advertising tags run only on marketing pages and never on enrollment, contact, upload, or any portal page. We use Conversions API integrations on the server side so the sensitive parts of a visit (the URL of an enrollment page, anything you type) are never shipped to advertising platforms. The list of active advertising tags is published below in the cookie inventory; if it is empty, no advertising tag is currently active.
Cookie inventory
Every cookie or browser-storage entry PactRX sets is listed below. We update this page whenever the list changes.
| Name | Category | Purpose | Retention | Party |
|---|---|---|---|---|
pactrx_consent | Strictly Necessary | Records your cookie consent choices so we don't ask again on every page. | 1 year | First-party |
NEXT_LOCALE | Preferences | Remembers your language choice (English or Spanish). | 1 year | First-party |
pactrx_*_access_token (localStorage) | Strictly Necessary | Authenticates your session in the patient, care partner, or admin portal. Only set after you log in. | Session | First-party |
pactrx_recent_patients, pactrx_sidebar_recent_open (localStorage) | Preferences | Admin-portal UI state (recently viewed patients, sidebar open / closed). Only set inside the admin portal after staff login. | Until cleared | First-party |
No analytics or marketing tags are currently active. When we deploy one, it will appear in this table with its name, the consent category it requires, and the pages it loads on, and the "Last updated" date above will move forward to that day.
Third-party services on our site
Two third-party services run on parts of our site. Neither sets advertising or analytics cookies and both are covered by Business Associate Agreements:
- ElevenLabs ConvAI powers the voice and text chat widget. It connects to ElevenLabs only when you start a conversation and does not track page views.
- Sentry captures application errors so we can fix bugs. It does not record sessions and does not collect personal information beyond what is needed to identify and reproduce errors.
Managing your choices
You can manage cookies three ways:
- Click the cookie preferences link in the site footer at any time.
- Delete the
pactrx_consentcookie in your browser to re-trigger the banner. - Use your browser settings to block or delete cookies entirely. Note that strictly necessary cookies are required for the site and portals to work; turning them off may prevent you from logging in or completing forms.
We respect Global Privacy Control (GPC) signals where supported.
Changes to this policy
If we change which cookies we set, we will update this page and the "Last updated" date above. Material changes will also be announced in the consent banner so you can review your choices.