Privacy Policy
Last updated: October 13, 2026
Salara Advisory Group, LLC ("Gale," "we," "us") operates shopwithgale.com. This policy explains what we collect, who we share it with, and how to exercise your rights. It is written for a US audience; Gale is not currently offered outside the United States.
Information We Collect
Account information
When you create an account we collect your email address and nursing role (e.g. RN, LPN, NP). We use this to personalize discounts, verify eligibility where brands require it, and send account-related messages.
Conversation data
We store your conversations with Gale to provide and personalize the service, including generating recommendations that may include affiliate links. You can delete conversation history at any time from your profile settings.
Usage and device data
We collect basic analytics such as pages visited, search terms, features used, IP address, coarse location (country-level, from IP), browser type, and referrer.
Two different things sit behind that sentence, and they are controlled differently. Google Analytics runs only when you have accepted the Analytics cookie category. Separately, Gale records its own first-party record of what was clicked and shown on our pages, which is how we tell which discounts are worth surfacing. That record is operational, is kept for 180 days, carries no name or email, stores your IP address only as a one-way hash, and is not shared with anyone. It is not cookie-based advertising and is not sold.
Cookies and similar technologies
Gale uses first-party cookies that are strictly necessary for the site to work, and optional cookies for analytics and affiliate attribution. You can review, change, or revoke your choices anytime via the Cookie Preferences link in the footer of every page, or by clicking .
What Gale does NOT collect
- Protected Health Information (PHI)
- Clinical data of any kind
- Patient information
- Data from EHR, EMR, or any hospital system
Gale has no integration with any clinical system and no plans to build one.
Cookies and Third Parties
We group cookies and trackers into four categories. Only the first is always on. You control the rest.
Strictly necessary (always on)
| Provider | Purpose | Retention |
|---|---|---|
| Gale (first-party) | Session, sign-in, role memory, consent record | Up to 12 months |
| Amazon Web Services (CloudFront, Route 53) | Content delivery, security, DDoS protection | Session |
| vanilla-cookieconsent | Remembering your consent choices | 12 months |
Analytics (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Google Analytics 4 (Google LLC) | Page-level usage, anonymized traffic patterns | 14 months |
We run Google Analytics with Consent Mode v2, which means Google only receives pageview pings if you have opted in to the Analytics category. IP addresses are truncated on Google's servers.
Marketing and affiliate attribution (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Rakuten Advertising | Attribute purchases to Gale so we get paid commission | Up to 30 days |
| Impact Tech, CJ Affiliate, and other affiliate networks Gale joins | Same — affiliate click attribution | Up to 30 days |
Preferences (opt-in)
| Provider | Purpose | Retention |
|---|---|---|
| Gale (first-party) | Remembering small UI preferences, e.g. your catalog filter state | 12 months |
| Brandfetch | Brand logo delivery (image-only, no cookies set) | N/A |
Sign-in SDKs (loaded on /login and /onboarding only)
When you visit the sign-in page, we lazy-load Google Identity Services (accounts.google.com) and the Apple Sign In JS SDK (appleid.cdn-apple.com). These are only loaded if you land on a sign-in page, and only to complete authentication. They are not loaded anywhere else on Gale.
The Gale Browser Extension
The Gale extension has one job: when you are on a store that offers a healthcare discount, it tells you the discount exists and where to claim it. It gets its own section because an extension can see more of your browsing than a website can, and you should be able to read exactly what this one does with that.
Why it asks for access to every site
Chrome asks you to approve access to all sites when you install it. The reason is that our catalog of roughly 1,600 brands changes most weeks. Naming each store inside the extension would mean a new Chrome Web Store review every time we added one, so a discount we found on Monday would reach you days later instead of the next morning.
What it does with that access is narrow. On each page it reads the site's domain name, checks it against the list of brands already stored on your device, and stops there when the site is not one we cover, which is almost every page. It does not read page content, form fields, cart contents, passwords or anything you type, and it makes no network request from the pages you visit.
What stays on your device
The following are held in the browser's extension storage, are never sent to us, and go away when you remove the extension: your on and off setting, the sites you have muted, where you dragged the tag, the downloaded list of discounts, the record of which discounts you have already seen so the tag stops repeating itself, and the anonymous id described below.
What the extension sends us
These four requests are all of them.
| When | What it carries | Kept for |
|---|---|---|
| Twice a day, in the background | A request for the current list of discounts. Nothing about you. | Not stored |
| When a discount tag is shown, opened, used or dismissed | An anonymous id, the brand, which service verifies the offer, and whether the offer had a stated percentage. No page address. | 180 days |
| Only when you submit a report about a wrong discount | The brand, the problem you picked, and the address of the page you were on with the query string and anchor removed. | Until the report is resolved |
| When you remove the extension | Chrome opens a page on shopwithgale.com carrying the anonymous id, so that the removal can be counted and we can ask what went wrong. | 180 days |
The anonymous id is a random value generated in your browser. It is not your account, your email or a device fingerprint, it is not joined to your Gale account if you have one, and it is replaced every 90 days. The extension needs no account and works without one.
Turning it off
Share anonymous usage data on the extension's options page (right-click the Gale icon, then Options) switches off the second and fourth rows above and deletes the anonymous id, so opting back in later starts a new one. Everything else about the extension keeps working. Those events are first-party and not cookie-based, which is why that switch governs them rather than the cookie banner on this site. Reporting a wrong discount is always a thing you choose to do, one report at a time.
Removing the extension in Chrome deletes everything it stored on your device. To have the events already collected deleted as well, email privacy@shopwithgale.com.
How We Use Your Information
- Provide and personalize clinician-verified discount discovery
- Maintain your account and keep you signed in
- Send you product updates and essential service messages
- Measure which features and discounts are useful (analytics category only)
- Attribute affiliate clicks to Gale so brands pay us commission (marketing category only)
- Detect fraud and protect the service
- Comply with legal obligations
How We Share Information
We do not sell your personal data in exchange for money. We share data with the following categories of third parties strictly as needed:
- Service providers: AWS (hosting, storage), Anthropic and AWS Bedrock (LLM responses in chat), Postmark / Resend (transactional email), all acting as processors under written agreements.
- Analytics: Google, only if you have accepted the Analytics category.
- Affiliate networks: Rakuten and similar networks, only if you have accepted the Marketing category. Under California law, this cookie-based attribution can be classified as "sharing" of personal information, which is why Gale offers a dedicated Do Not Sell or Share My Info opt-out.
- Legal and safety: Law enforcement or regulators when required by valid legal process.
Your Privacy Rights
Residents of California, Virginia, Colorado, Connecticut, Utah, Oregon, Texas, Montana, Delaware, and other states with comprehensive privacy laws have the right to:
- Know what personal information we collect and how we use it
- Access a copy of the personal information we have about you
- Correct inaccurate personal information
- Delete your personal information
- Opt out of the sale or sharing of personal information
- Opt out of targeted advertising
- Not be discriminated against for exercising these rights
To exercise any of these rights, email privacy@shopwithgale.com. We will verify the request and respond within the timeframe required by the applicable law (typically 30-45 days).
Global Privacy Control (GPC)
Gale honors the Global Privacy Control browser signal as a valid opt-out of the sale or sharing of personal information, as required by California, Colorado, Connecticut, and other state laws. If your browser sends a GPC signal, Gale will not show you a consent banner and will treat all non-essential cookie categories as denied.
Appealing a decision
If we decline a privacy-rights request, you may appeal by replying to our response email. If you remain unsatisfied, you may contact your state Attorney General.
Data Retention
We keep account data for as long as your account is active, plus up to 24 months for dispute resolution and legal compliance. Conversation data is retained for up to 12 months by default, or until you delete it. Cookie-based data follows the retention periods in the tables above.
Children
Gale is not directed to children under 16 and we do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest on AWS, least-privilege access controls, and routine security review. No system is perfectly secure; please report any suspected vulnerability to security@shopwithgale.com.
Changes to This Policy
When we make material changes we will update the "Last updated" date and notify signed-in users by email or in-app notification.
Contact
Salara Advisory Group, LLC
Email: privacy@shopwithgale.com