Cookie policy

Effective September 25, 2026. Last updated October 6, 2026.

This policy explains the cookies and similar technologies that EBO2.com uses on ebo2.com and app.ebo2.com, how our cookie banner decides whether to ask you first, and how to change your mind. It adds to our privacy policy. The short version: today we set only the cookies the sites need to work, and anything optional waits for your permission wherever the banner appears.

What cookies are

Cookies are small text files that a website asks your browser to store and send back on later visits. Similar technologies, such as scripts that check your browser, can serve some of the same purposes, and this policy covers them too. A first-party cookie is set by the site you are visiting; a third-party cookie is set by another company's service that the site uses. A session cookie disappears when you close your browser, and a persistent cookie stays until it expires or you delete it. Every cookie that ebo2.com and app.ebo2.com set today is a first-party, persistent cookie, and the table below gives each one's lifetime. ebo2.com does not use other browser storage, such as local storage, to keep information about you.

What each category means

Necessary

Necessary cookies make a site work, and a site cannot do what you ask without them: for example, remembering the choice you made in the cookie banner so it does not ask on every page, working out whether the banner needs to appear where you are, or keeping you signed in to your account. They are always on, and the banner does not offer a switch for them. On ebo2.com they hold no information about what you read.

Analytics

Analytics cookies let a site count and understand visits over time, such as which pages people read and how they arrive. The only analytics cookies ebo2.com could use are Google Analytics cookies, and Google Analytics is not connected today. Vercel Web Analytics, which we do use to count visits, is not in this category because it sets no cookies.

Marketing

Marketing cookies are used to measure or target advertising. We run no ads and use no marketing cookies today. The banner still offers the category so that you can set your choice in advance. Where the banner appears, it starts switched off.

How the banner works, region by region

Where we ask first

If you visit from the European Economic Area, the United Kingdom, Switzerland, California, Washington, Nevada, or Connecticut, or from a place we cannot identify, a banner asks for your cookie choices the first time you visit ebo2.com. For this purpose, the European Economic Area also includes the EU territories that location services list under their own codes: Åland, French Guiana, Guadeloupe, Martinique, Mayotte, Réunion, and Saint Martin. We also ask first in a few places that location services list under their own codes and that are tied to Norway or the United Kingdom: Svalbard and Jan Mayen, which belong to Norway; the Crown Dependencies of Jersey, Guernsey, and the Isle of Man; and Gibraltar.

What the banner offers

It offers three buttons of equal weight: Accept all, Reject all, and Customize. Customize lets you turn analytics cookies and marketing cookies on or off separately, and neither is switched on in advance. Until you choose, optional cookies stay off and no Google tag loads. If you close the page or keep reading without choosing, nothing optional is set, and the banner asks again on the next page. Reject all is remembered like any other choice, so saying no once is enough.

Why those places

• The EEA, the UK, and Switzerland. European and UK law require consent before a site uses cookies that are not strictly necessary, and we treat Switzerland, and the places tied to Norway and the United Kingdom listed above, the same way.
• California. A site about a health procedure can collect information that California law treats as sensitive, so we chose to ask first there rather than rely on an opt-out.
• Washington, Nevada, and Connecticut. Their consumer health data laws can require consent before a health information site collects data such as analytics. Our consumer health data privacy policy explains those laws.
• Anywhere we cannot tell. If we cannot work out where you are, we treat you as someone who must be asked first. That includes a visit that we can tell comes from the United States but not from which state, because in the United States whether we ask first depends on the state. When in doubt, the banner fails closed.

Everywhere else

Everywhere else, no banner appears, and analytics and marketing cookies are on unless you turn them off with "Cookie settings" at the bottom of any page. Marketing stays off if your browser sends a Global Privacy Control signal. With Google Analytics not connected, nothing optional is set today either way.

How we tell where you are

We tell where you are from your IP address. Our host, Vercel, works out your country and, where it can, your state or region, and stores it in the ebo2_geo cookie described below, for example "US-CA." That location stays in your browser; we do not store it, and we use it for nothing else. If you use a VPN or another service that routes your connection through a different place, the banner follows the place your connection appears to come from.

How long your choice lasts

We store your choice in your browser for 12 months. After that, or if we change our cookies in a way that needs a fresh choice, the banner asks again where it applies.

On app.ebo2.com

On app.ebo2.com, we use only necessary cookies, so there is nothing optional to choose there, and no banner.

Global Privacy Control

Global Privacy Control (GPC) is a signal that some browsers and extensions send to tell websites that you do not want your information sold or shared for advertising. If your browser sends it, marketing cookies stay off wherever you are, and the banner does not let you turn them on: the marketing box is switched off and cannot be ticked, and a note explains why. Where the banner appears, analytics cookies still need your opt-in.

Outside the places where the banner appears, GPC does not switch analytics off, because we do not use analytics to sell your information or to advertise to you; you can turn analytics off yourself with "Cookie settings." The banner reads the signal in your browser each time a page loads, and we do not store it. app.ebo2.com has no optional cookies, so there is nothing for the signal to switch off there. Our privacy policy explains how we treat GPC as a request to opt out under US state privacy laws.

How to send the signal

Some browsers can send GPC for you: Firefox has a setting for it in its privacy settings, and Brave and the DuckDuckGo browser send it by default. For other browsers, privacy extensions can add it. Once it is on, it applies to every site you visit, not only ours.

Cookies and storage we use

Google Analytics is not connected today, so its cookies are not set at present. We list them so that you know what to expect if we connect it. Where the banner appears, they will be set only if you accept analytics; elsewhere, they will be set unless you turn analytics off.

Vercel Web Analytics, which we use to count visits, sets no cookies, so it runs whether or not you accept optional cookies. It tells visitors apart with a hash created from the incoming request instead of a cookie, and Vercel discards each visitor's session after 24 hours. Our privacy policy lists what it records with each page view. When you sign up on app.ebo2.com, Vercel BotID runs a script that has your browser answer an invisible challenge, which Vercel checks to tell people apart from automated bots. We treat it as necessary, because it protects sign-up from abuse.

The tools, the reports, and the downloads

Our four tools, the price check, the session cost planner, the clinic finder, and the questions for your doctor, set no cookies of their own and write nothing to your browser's storage: their code uses no local storage, session storage, or IndexedDB. What you enter lives in the open page while you use it, and the tools keep no copy. Your browser may hold on to form entries for a while, for example to show them again if you go back to the page, as browsers do on any site; that copy stays on your device. Our reports are ordinary pages and set nothing beyond what every page sets.

The pages the tools are on

A tool page is an ordinary page of ebo2.com, so it carries what every page carries: our host sets or renews the ebo2_geo cookie with the page, the consent script reads that cookie and any choice stored in ebo2_consent, and Vercel Web Analytics counts the visit without a cookie. None of these holds anything you enter in a tool.

The clinic finder's ZIP code tables

When you search by ZIP code, the clinic finder downloads one small table from ebo2.com, named by the first digit of the ZIP code. The table is a file, not a page, so opening it sets no cookie, not even ebo2_geo. As with any request to ebo2.com, your browser sends the cookies the site has already set along with it, but the lookup does not use them. The page keeps each table in memory while it is open, so a second search for a ZIP code with the same first digit needs no new download, and your browser may keep the table in its ordinary cache, as it does for any file.

Location permission

If you let the clinic finder use your location, your browser may remember that permission for ebo2.com. That is a setting your browser keeps, not a cookie we set, and the site does not store the position itself. Deleting cookies does not always reset the permission. To review or change it, look in your browser's site settings: in Chrome, Settings, then Privacy and security, then Site settings, then Location; in Firefox, Settings, then Privacy & Security, then Permissions, then Location; in Safari on a Mac, Settings, then Websites, then Location; and in Edge, Settings, then "Cookies and site permissions," then Location. Only the clinic finder's page can ask for your location; every other page of ebo2.com tells your browser that it may not.

Copying and printing

The session cost planner and the questions for your doctor can copy your plan or list to your device's clipboard, but only when you press the copy button, and the site never reads your clipboard. A list from the questions tool includes the situations you checked, so the copy can hold health details. Printing uses your browser's print window and sets nothing.

Data downloads

Opening or downloading one of the files on our data page sets no cookie: our host's cookie rule applies only to pages, not to files. A download needs no account and no email address.

Third parties and their policies

Google

ebo2.com can load Google Tag Manager, and through it Google Analytics. Neither is connected today, so ebo2.com loads nothing from Google at present. If we connect them: where the banner appears, they load only after you accept analytics or marketing cookies, and Google Analytics sets its cookies only if you accept analytics; elsewhere, they load unless you turn both off. Before any Google tag could load, each page tells Google's tags which kinds of storage you have allowed, using Google's Consent Mode, so that the tags do not use storage you have refused. The tags load two seconds after the page has finished loading, so they do not slow down what you came to read.

If you turn analytics or marketing off after allowing it, we delete Google's cookies on ebo2.com and tell Google's tags to stop using that kind of storage, and once both are off, Google's tags no longer load on the pages you visit. Google's own policies explain what Google does with the information its tags collect: its privacy policy and its page on how Google uses information from sites that use its services. Google also offers a browser add-on that turns off Google Analytics on every site you visit.

OpenStreetMap

A clinic page shows a map made of OpenStreetMap's map tiles, which your browser loads from OpenStreetMap when you open the page. OpenStreetMap receives your IP address, the map area around the clinic, and our site's address, but not the page you were on. The tiles are plain images, and OpenStreetMap's tile server sets no cookies when it sends them. OpenStreetMap is run by the OpenStreetMap Foundation, whose privacy policy applies to what it collects.

Other websites

Websites we link to, such as clinic websites, journal publishers, and PubMed, may set their own cookies when you visit them. So may the map services behind the Directions and Apple Maps links on each clinic page, which open Google Maps and Apple Maps. This policy does not cover them; their own cookie and privacy policies apply.

Change your choices

Wherever you are, you can change your cookie choices at any time. This button opens the cookie banner:

Change your cookie choices

The "Cookie settings" and "Your privacy choices" links at the bottom of every ebo2.com page do the same. The banner opens with your current choices ticked, including the ones that apply by default where no banner appears, so you can see what is on before you change anything. A new choice applies from then on, on every page of ebo2.com, and replaces the old one. If you turn off something that was on, we remove Google's cookies at once, as described above.

app.ebo2.com has no optional cookies, so it has no banner. To remove its sign-in cookie, sign out, or delete the cookies for app.ebo2.com in your browser, which also signs you out.

Block or delete cookies in your browser

You can also control cookies in your browser's settings: see which cookies a site has set, delete them, or block them. Menus change from one browser version to the next, so the paths below are a general guide. The mobile versions of these browsers have similar settings, usually under Privacy or Site settings.

Chrome

Open Settings, then Privacy and security. "Delete browsing data" removes cookies for all sites, "Third-party cookies" controls whether other companies' cookies are blocked, and Site settings lets you see the data stored by one site, such as ebo2.com, and delete it.

Firefox

Open Settings, then Privacy & Security. Under Cookies and Site Data, "Clear Data" removes cookies, and "Manage Data" lets you find ebo2.com and remove only its data. Enhanced Tracking Protection, on the same page, controls how much Firefox blocks, and its Custom setting lets you block all cookies.

Safari

On a Mac, open Safari, then Settings, then Privacy. "Manage Website Data" lets you remove the data for one site, and "Block all cookies" blocks them all. On an iPhone or iPad, the same options are in the Settings app under Safari, including "Clear History and Website Data" and, under Advanced, Website Data.

Edge

Open Settings, then "Cookies and site permissions," then "Manage and delete cookies and site data." There you can block third-party cookies, block all cookies, or see the data for one site and delete it. "Clear browsing data," under "Privacy, search, and services," removes cookies for all sites.

What blocking or deleting changes here

• If you delete the ebo2_consent cookie, the banner asks again the next time you open a page where it applies. Elsewhere, the defaults described above apply again.
• If you delete the ebo2_geo cookie, our host sets it again on the next page you open.
• If you block all cookies for ebo2.com, the site still works, but it can neither remember your choice nor tell where you are, so the banner asks on every page, wherever you are. Nothing optional is set while it waits.
• If you block or delete cookies for app.ebo2.com, you are signed out, and you cannot stay signed in until you allow them again.
• Blocking or deleting cookies does not affect the tools, which use none, and it may not reset a location permission you gave the clinic finder; that is in your browser's site settings, as described above.

If JavaScript is off

The banner needs JavaScript. If JavaScript is off in your browser, the banner does not appear, and no optional cookies are set and no Google tag loads, because the scripts that would load them do not run either. Vercel Web Analytics does not run, so your visit is not counted. Our host still sets the ebo2_geo cookie, because it arrives with the page itself rather than from a script, but nothing reads it.

With JavaScript off, the button above and the "Cookie settings" links cannot open the banner; the footer links take you to the choices section of our privacy policy instead. There is nothing to change, because nothing optional runs. The map on clinic pages needs no JavaScript, so it loads either way. app.ebo2.com needs JavaScript to sign in, so without it, it sets no sign-in cookie.

The tools also need JavaScript for their interactive parts. Without it, each tool page shows a short note and the reference information instead, such as the table of published prices or the full list of questions, the clinic finder makes no request for a ZIP code table, and the "Use my location" button does not appear.

How long cookies last, and what we keep

Each cookie's lifetime is in the table above. In short:

• your cookie choices: 12 months from the day you choose, after which the banner asks again where it applies;
• your approximate location for the banner: 1 day, renewed on each page you open;
• the sign-in cookie on app.ebo2.com: until you sign out, or up to 400 days;
• Google Analytics cookies, if we connect Google Analytics and they are allowed: up to 2 years, unless you withdraw consent or delete them sooner.

These cookies live in your browser. We do not keep a separate record of your cookie choices or your location on our servers, so we cannot look up or restore a choice for you; if you clear your cookies, you choose again. The request logs that our host keeps, which our privacy policy describes, are kept briefly under the host's retention settings. If we connect Google Analytics, Google keeps what it collects under Google's policies and the retention setting of our Google Analytics account.

Changes to this policy

When we change this policy, we post the new version on this page and change the date at the top, and the change history below lists each update. If we add a new kind of optional cookie, or change what a category covers, in a way that needs a fresh choice, the banner asks you again where it applies before the change applies to you: each stored choice carries the version of our cookie set-up it was made under, and a choice made under an older version no longer counts. Our privacy policy explains how we give notice of material changes.

Contact

Questions about cookies: use the contact form or write to EBO2.com, 1968 S. Coast Hwy, #1921, Laguna Beach, CA 92651, United States. For a privacy request, choose "Privacy or data request" in the form.

Change history

• October 6, 2026: clinic pages now show their map without a "Show map" step. Your browser loads the map's tiles from OpenStreetMap when you open a clinic page; the tile server sets no cookies.
• October 3, 2026: the banner now also asks first in Svalbard and Jan Mayen, Jersey, Guernsey, the Isle of Man, and Gibraltar. As this policy already said, it now also asks first when we can tell that a visit comes from the United States but not from which state; until this update, such a visit got no banner. The policy now describes Vercel Web Analytics as Vercel's documentation does, and Vercel BotID's check as an invisible challenge your browser answers. The cookies we use, and how long they last, did not change.
• October 2, 2026: added a section on the tools, the reports, and the downloads, which went live before this update. The tools set no cookies of their own and write nothing to your browser's storage, the ZIP code tables and data files set no cookie, a location permission is a setting your browser keeps, and copying a plan or list puts it on your clipboard only when you ask. The cookies we use, and how long they last, did not change.
• September 28, 2026: expanded every section with more detail; no change to how we handle your information. The cookie table now also names the sign-in service's one-time security codes and gives the sign-in cookie's full lifetime.
• September 26, 2026: the banner also asks first in Washington, Nevada, and Connecticut.
• September 26, 2026: the banner appears only in the European Economic Area, the United Kingdom, Switzerland, and California, and wherever we cannot tell where you are; elsewhere, optional cookies are on until you turn them off.
• September 25, 2026: first published.