EEA and UK: consented hashed-email matching with Meta
The Meta Advanced Matching row applies only to the EEA and UK. When you enter an email address into a web-app form, Flo hashes it with SHA256 and shares the hash with Meta if you consent. Meta may match it to your account to measure advertising effectiveness and deliver more relevant Meta ads, including measurement across devices and browsers. Flo says no health information or actual email address is shared in this process. The entry is persistent for 90 days.
Supporting quotations
Meta (Facebook)
(EEA & UK only)
Meta Advanced Matching We use a privacy-enchancing process to help measure the effectiveness of our advertising. Specifically, when you input your email address into a form in our web app, we convert your email address into a secure, hashed format using industry-standard SHA256 hashing. We then share this hashed email address with Meta if you give your consent, and Meta matches this, if possible, to your Meta account in order to help measure the effectiveness of our advertising and deliver more relevant ads to you on the Meta platforms. No health information is shared as part of this process. Using Meta Advanced Matching helps us improve how we measure ad performance across devices and browsers, without sharing your actual email address. Persistent 90 days
Sharing & Disclosure · Company practice
EEA and UK: hashed-email matching with Google
Google Enhanced Conversion is labeled EEA and UK only. Flo hashes your email address with SHA256 before sharing it with Google. Google may match the hash to signed-in accounts to identify ads leading to actions such as purchases or sign-ups and measure performance across devices and browsers. Flo says it shares no health information or actual email address in this process. The entry lasts up to 90 days.
Supporting quotations
Google Google Enhanced Conversion (EEA & UK only) We use a privacy-enchancing process to help measure the effectiveness of our advertising. Specifically, we convert your email address into a secure, hashed format using industry-standard SHA256 hashing before sharing it with Google. This hashed information allows Google to match it, if possible, to signed-in Google accounts in order to understand which ads may have led to a specific action, like a purchase or sign-up. No health information is shared as part of this process. This helps us improve how we measure ad performance across devices and browsers, without sharing your actual email address. Persistent up to 90 days
Sharing & Disclosure · Company practice
HubSpot’s marketing-table analytics entry lasts 90 days
The marketing table’s __ptq.gif entry sends website analytics data to HubSpot and is persistent for 90 days. This is the description and duration for this specific entry.
Supporting quotations
HubSpot __ptq.gif Sends analytics data to HubSpot about the website Persistent 90 days
Sharing & Disclosure · User right or choice
You can withdraw consent for advertising data through settings
Flo says you can withdraw consent to collection for targeted advertising or sharing data with third-party advertisers through Flo privacy settings or device settings. This does not itself say the app displays third-party ads.
Supporting quotations
You can also withdraw your consent for the collection of data for targeted advertising or sharing their data with third-party advertisers through Flo privacy settings or your device’s settings.
Our App is never used to present you with third-party advertising. You can browse with full confidence in the protection of your privacy. Access is requested with the purpose of enabling the use of our services and improving their functioning. It is subject to a prior consent request and the possibility of withdrawing this consent. Flo services may still be used even in the event of refusal or withdrawal of consent.
Sharing & Disclosure · Company practice
Google Consent Mode sends limited data before consent
Google’s GCS pings adjust tags based on consent choices. The table says limited data is transmitted before consent is provided; it does not say no data is sent or define that limited data. The entry has a session duration.
Supporting quotations
Google GCS pings (Google Consent Mode) Google Consent Mode allows our tags to adjust based on your consent choices. Until consent is provided, only limited data is transmitted. Session