Cookies and browser storage

1. Authentication storage

We use Supabase for authentication. Signing in sets a first-party session cookie (named sb-<project-ref>-auth-token) that keeps you signed in between visits. This cookie is strictly necessary for the Service to function and is not used for tracking or advertising.

2. Analytics

We use Vercel Web Analytics and Vercel Speed Insights to understand overall site usage and performance. These do not use cookies and do not persistently identify individual visitors; they process aggregated data such as page views, approximate location derived from IP address, and performance metrics. This data is processed by Vercel, based in the United States; we rely on Vercel's Standard Contractual Clauses for this transfer.

3. Choices

We do not currently load any advertising or behavioral tracking scripts. Storage strictly necessary for the service you have requested (such as keeping you signed in) may fall under the exemption in section 25(2)(2) TDDDG; any related processing of personal data still requires a valid basis under the GDPR. You can sign out at any time, which clears your session cookie; you can also clear cookies manually in your browser, though this will end your session and require you to sign in again. Your language preference is currently held only in memory during your session and is not persisted.

4. Future changes

Before adding any cookie-based tracking (such as advertising or behavioral analytics), we will disclose each provider, its purpose, the name and duration of any storage used, and block it until you make an affirmative choice. Rejecting will be made just as easy as accepting, and withdrawal just as easy as consent. Tracking will never receive medical filenames, document contents or chat messages.