Nutrio uses only the cookies it needs, and there aren't many. No advertising trackers, no selling your browsing to anyone.
Reading the site sets no cookies at all. Sign in — which only happens when you connect an assistant — and a couple of cookies hold that session so you don't have to sign in twice. If you allow it, Google Analytics counts visits so I can see what's slow or broken. The sign-in form also loads Cloudflare's bot check, which is the one other company a page here contacts.
sb- (long sessions are split across a pair), and they last up to 400 days unless you sign out or clear them. Asking for a sign-in code writes one more, a short-lived sb- cookie that proves the code came back to the same browser that requested it — so that one appears before you finish signing in, not after. All of it exists for a single screen: the one where you approve an assistant's connection. Everything else on the site works without it, and everything about your account is done in the iOS app._ga cookies so I can count visits and see which pages people actually reach. They last two years unless you clear them — the button below does that, and forgets your answer so the script stops loading — while Google deletes the visit data after two months and the user-level records behind it after 14. Google's advertising signals are switched off, so none of it feeds ad profiles, and I only ever look at the totals. Say no and the script never loads at all.Analytics only run if you said yes to them, and you can take that back whenever you like — nothing about the app changes either way.
You can clear or block cookies in your browser settings at any time. Blocking the session cookie signs you out, so connecting an assistant stops working — the rest of the site carries on as normal.
Questions about cookies or anything else? Write to privacy@nutrioapp.com and a real person will reply.