Cookie Policy

Last updated: September 29, 2026

This Cookie Policy explains how NSR ONE, LLC, a New York limited liability company, doing business as Remworth ("Remworth," "we," "us," or "our"), uses cookies and similar technologies on our website at remworth.com and our application at app.remworth.com (together, the "Service"). It supplements our Privacy Policy and forms part of our Terms of Service. Capitalized terms not defined here have the meaning given in those documents.

The short version: we run no analytics or advertising tracker inside the signed-in application. On our public marketing pages at remworth.com we use two tools: Hotjar, to understand how visitors use those pages (heatmaps and session recordings of the marketing pages), and the Reddit Pixel, which reports visits to remworth.com to Reddit so Reddit can tell us which of our ads brought visitors. Nothing of the kind ever runs inside the signed-in application - the app shows your Amazon and financial records, and we do not measure behaviour there. Both marketing-page tools stay off for visitors whose browser sends the Global Privacy Control or Do Not Track signal, and you can switch the Reddit Pixel off for your browser at any time at https://remworth.com/privacy-choices/. The only browser storage the app writes is the token that keeps you signed in and a few interface preferences.

1. What these technologies are

Cookies are small files a website asks your browser to store and can read back later. Our marketing pages set the Hotjar and Reddit Pixel cookies listed in Section 2. The application sets none, apart from any Cloudflare security token (below).
Local storage lets a site keep data in your browser without a cookie. The application uses it for your signed-in authentication token and small interface preferences; the marketing pages use it for the rw_ads_optout opt-out flag (Section 2).
Beacons are small script or image requests that report technical information such as page-load timing. We use one of our own, described below; the Reddit Pixel in Section 6 also reports by such requests.
Software Development Kits (SDKs) are bundles of third-party code that can collect data and set their own identifiers. We ship none, and none is planned.

We refer to these collectively as "trackers."

Agreeing to our Terms is never treated as agreement to trackers. Every analytics or advertising tool on our marketing pages is disclosed in this policy before it runs, honours the Global Privacy Control and Do Not Track signals in Section 7, and never relies on your acceptance of the Terms as permission. Nothing inside the application needs consent, because nothing there measures behaviour.

2. Everything we use

This is the complete list. There is no second table of planned trackers.

What	Provider	Where it runs	Purpose	Type	Consent needed
Authentication token — `remworth_token` (older sessions may still carry `asin_oracle_token`)	Remworth	app.remworth.com only	Keeps you signed in; carries your session as a signed JSON Web Token	Local storage, not a cookie. Cleared on logout or when the token expires	No — strictly necessary
Interface preferences (for example your chart range or hidden-column choices)	Remworth	app.remworth.com only	Remembers small display choices so the app looks the same next visit	Local storage, not a cookie. Contains no personal or financial data	No — functional, first-party
Cloudflare Web Analytics beacon	Cloudflare, Inc.	remworth.com and app.remworth.com	Measures page views and page-load performance so we can keep the Service fast and available	Script beacon. Sets no cookie and no identifier; it does not follow you across sites	No — see Section 3
Cloudflare network protection	Cloudflare, Inc.	Both	Protects the Service from attacks and abuse	May set a security token in some conditions	No — strictly necessary
Google Fonts	Google LLC	app.remworth.com only	Delivers the app's typefaces. Sets no cookie, but the request transmits your IP address to Google. Our marketing pages use self-hosted fonts and make no request to Google	Per-request only; fonts may be cached by your browser	No — functional
Hotjar behaviour analytics (`_hjSessionUser_6751291`, `_hjSession_6751291`, and related `_hj*` keys)	Hotjar Ltd (part of the Contentsquare group)	remworth.com marketing pages only	Understand how visitors use our marketing pages: aggregate usage, heatmaps, and session recordings of those pages. Keystroke input is suppressed by default. Never runs on app.remworth.com or any page showing your financial or Amazon data.	Cookies and browser storage; session key ~30 minutes, user key up to ~1 year	Analytics - see Section 6
Reddit Pixel (`_rdt_uuid`, `_rdt_cid`)	Reddit, Inc.	remworth.com marketing pages only	Advertising measurement: tells Reddit that a visitor reached our site, viewed the pricing page, or clicked a trial button, so Reddit can report which of our ads brought visitors and show our ads to similar people. Never runs on app.remworth.com or any page showing your financial or Amazon data. Not loaded when your browser sends GPC or DNT, or after you opt out at https://remworth.com/privacy-choices/	First-party cookies written by Reddit's script on remworth.com: `_rdt_uuid` (a random browser identifier) and `_rdt_cid` (a click identifier, only when you arrive from a Reddit ad), each kept 90 days. Reddit may also read its own cookies on reddit.com if you are signed in there	Advertising - see Section 6
Opt-out preference (`rw_ads_optout`)	Remworth	remworth.com marketing pages only	Remembers that you switched the Reddit Pixel off at https://remworth.com/privacy-choices/	Local storage, not a cookie. Contains no personal data; nothing is sent anywhere when it is set	No - it exists only to honour your choice
Stripe Checkout	Stripe, Inc.	Only when you start or manage a subscription	Runs secure checkout and helps Stripe prevent payment fraud	Stripe's own cookies, set on Stripe's pages	No — strictly necessary to a payment you requested

3. About the Cloudflare measurement beacon

We want to be precise about this one, because it is the only measurement that runs inside the application.

Cloudflare Web Analytics reports how many times a page was viewed and how quickly it loaded. It is cookieless: it stores nothing in your browser, assigns you no identifier, and cannot recognise you on a later visit or on any other website. It does not record your screen, your mouse, or your keystrokes, and it never has access to the Amazon or financial data shown inside the app.

It runs on both our marketing pages and the application. We disclose it here as measurement rather than filing it under security, because that is what it does.

4. What we do not do

We do not:

run any advertising, retargeting, or conversion tracker inside the application, or on any page that shows your financial or Amazon data. On the marketing pages the one advertising tracker we run is the Reddit Pixel, described in Section 6;
use Google Analytics or Google Ads — we have decided not to use them;
run a Meta Pixel, a TikTok pixel, or any social-platform tracker other than the Reddit Pixel on the marketing pages;
sell personal information. The Reddit Pixel does disclose marketing-page visit data to Reddit for advertising measurement, which some U.S. state privacy laws count as "sharing" for cross-context behavioural advertising; that is why we honour Global Privacy Control automatically and offer the opt-out at https://remworth.com/privacy-choices/ (Sections 6 and 7). Nothing from inside the application is ever shared that way, and we never use personal information for targeted advertising ourselves;
allow any third party to collect data through the application for that third party's own purposes (Google receives your IP address to serve fonts to the app, Stripe processes payment data, and Hotjar processes marketing-page usage on our behalf as our service provider). The one exception is on the marketing pages: Reddit receives marketing-page visit data through its pixel for its own advertising measurement and ad delivery, as an independent controller, and is named in our Privacy Policy (Section 9) and DPA (Annex 3);
run any behaviour-measurement tool inside the signed-in application. See Section 5.

5. The application is treated differently from our website

The application at app.remworth.com displays your Amazon and financial records. We therefore hold a standing rule:

No analytics, measurement, session-recording, or advertising tool that captures user behaviour will ever run inside a signed-in Remworth session. The single exception is the cookieless Cloudflare beacon described in Section 3, which reports page views and load performance only, sets no identifier, and never has access to the data displayed on the page.

This is why Hotjar - which does record sessions and build heatmaps - and the Reddit Pixel - which reports visits to an advertising platform - run on remworth.com only and are absent from app.remworth.com. Any marketing or analytics tool we add in future is subject to the same rule: marketing pages only, never a Google product, and this policy is updated before it runs.

6. Analytics and advertising measurement on our marketing pages, and your choices

Neither Hotjar nor the Reddit Pixel is a strictly-necessary technology, and we want to be direct about both rather than bury them.

Hotjar - where it runs. Public marketing pages on remworth.com only. It records how visitors move through those pages so we can improve them. It is never present on app.remworth.com, on any authenticated page, or on any page displaying your financial or Amazon data.

Who we serve. Remworth is a business-to-business service offered to sellers in the United States. We do not target or offer the Service to residents of the EEA or the UK. If you are visiting from a jurisdiction that requires prior consent for analytics cookies, you can opt out before browsing further using the controls below, and you should not rely on this site as being directed to you.

How to opt out of Hotjar.

Hotjar's own opt-out, which works across every site using Hotjar: https://www.hotjar.com/policies/do-not-track/
Global Privacy Control or Do Not Track in your browser - when either is on, our pages do not load Hotjar at all (Section 7).
Blocking or clearing cookies for remworth.com in your browser settings.

What it never collects. Hotjar suppresses keystroke input by default, and it has no access to the application, so it cannot see your Amazon data, your financial records, or anything behind your login.

The Reddit Pixel - where it runs. Public marketing pages on remworth.com only, and only when your browser sends no Global Privacy Control or Do Not Track signal and you have not opted out. It is never present on app.remworth.com, on any authenticated page, or on any page displaying your financial or Amazon data.

What it sends to Reddit. The address of the marketing page you visited; three events - a page visit, a view of the pricing page, and a click on a trial button; a random browser identifier that Reddit keeps in the _rdt_uuid cookie for 90 days; a click identifier if you arrived from a Reddit ad; and your IP address, device and browser details. It never sends your name, your email address, anything you type, or anything from inside the application.

What Reddit does with it. Reddit uses the data to tell us which of our ads brought visitors and to show our ads to people similar to our visitors. Reddit processes it as an independent controller under its own Privacy Policy (https://www.reddit.com/policies/privacy-policy). Certain U.S. state privacy laws treat this kind of disclosure as "sharing" for cross-context behavioural advertising, which is why the opt-out routes below exist and why Global Privacy Control is honoured automatically. Our Privacy Policy (Sections 10, 11, 20 and 21) describes the disclosure and your rights.

How to opt out of the Reddit Pixel.

Our Your Privacy Choices page: https://remworth.com/privacy-choices/ - one switch, stored in your browser, effective on the next page you open.
Global Privacy Control or Do Not Track in your browser - either signal keeps the pixel (and Hotjar) from loading, with no further action from you.
Reddit's own advertising controls, if you have a Reddit account: https://www.reddit.com/settings/privacy
Blocking or clearing cookies for remworth.com in your browser settings.

Hotjar processes marketing-page usage on our behalf as our service provider, which is not a "sale" or "share". The Reddit Pixel is the only disclosure on any Remworth surface that those terms could describe. For the browser you use them in, the Your Privacy Choices switch, Global Privacy Control and Do Not Track each stop the pixel loading from the next page you open; blocking cookies limits what Reddit can retain about your browser, and Reddit's own controls govern what Reddit does with the data it holds.

7. Your choices

Browser controls. You can clear local storage and block or delete cookies in your browser settings. Clearing the authentication token signs you out of the app; clearing preference keys resets display choices. Clearing local storage on remworth.com also removes the rw_ads_optout flag, so the Reddit Pixel loads again until you opt out once more at https://remworth.com/privacy-choices/.
Signing out. Logging out clears your authentication token.
Global Privacy Control (GPC). We honour GPC automatically. When your browser sends the signal to remworth.com, our marketing pages load neither the Reddit Pixel nor Hotjar, and we treat the signal as a valid opt-out from sharing and targeted advertising for that browser, without any further action from you. The application has nothing for the signal to switch off.
Your Privacy Choices. https://remworth.com/privacy-choices/ switches the Reddit Pixel off (or back on) for the browser you are using. The choice is stored in that browser's local storage as rw_ads_optout and takes effect on the next page you open; the page is linked from the footer of every marketing page.
U.S. state privacy rights — including access, deletion, correction, and opting out of sale, sharing, or targeted advertising — are described in our Privacy Policy, and you can exercise them at any time by writing to [email protected]. Those rights do not depend on any cookie control.
Do Not Track. We treat DNT the same way as GPC on our marketing pages: when it is on, neither the Reddit Pixel nor Hotjar loads.

8. International visitors

Our Service is offered to sellers in the United States and our systems are operated in the United States. Cloudflare, Google (fonts), Stripe, and Reddit are U.S.-headquartered providers and may process the limited technical data described above outside your country; Hotjar is based in Malta. The marketing-page tools in Section 6 are directed to United States visitors; if you are in the EEA or UK, use the opt-out routes in Sections 6 and 7 before browsing further. Where personal data of EEA or UK individuals is transferred, we rely on the EU Standard Contractual Clauses (2021/914) and, for the UK, the International Data Transfer Addendum. We do not rely on the EU–US Data Privacy Framework as our transfer mechanism.

9. Email

Transactional emails — password resets, sign-up links, team invitations, and service notices — carry no tracking pixel.

We do not currently send marketing email. If we begin, it will be to recipients who opted in, any open- or click-measurement will be disclosed here first, and every message will carry an unsubscribe link.

10. Changes to this policy

We may update this Cookie Policy. When we do, we will revise the "Last updated" date above. Where a change is material — in particular, adding any tracker that measures behaviour — we will give prominent notice before the change takes effect, and put any required consent mechanism in place first.

11. Contact

Privacy and data-rights requests: [email protected]
Legal notices: [email protected]
General support: [email protected]

NSR ONE, LLC, doing business as Remworth