Cookie Policy

2.1. The following cookies are needed for the service to work; they do not depend on consent and cannot be switched off:

• Session cookie — purpose: keeping your session going after you sign in; duration: until the browser closes, or at most 7 days if “remember me” is chosen.
• Trusted-device cookie — purpose: not asking for the two-step verification code at every sign-in when you choose “trust this device”; duration: 30 days; created only if you choose it.
• Payment matching cookie — purpose: matching the payment result to the session that started a purchase; duration: short-lived, deleted when the payment completes.
• Cookie choice record — purpose: remembering the decision you made in the cookie card; kept in local storage, never sent to the server.
• Registration draft — purpose: bringing back what you typed (clinic name, name, e-mail, telephone) when you leave the registration form unfinished, in the same browser, for 7 days; kept in local storage, never sent to the server, deleted when registration completes.
• Registration hand-off — purpose: carrying your e-mail address from the home-page box to the registration page in the same tab for at most 30 minutes; kept in session storage and deleted once read.
• Sign-in hint — purpose: knowing whether you are signed in while a page opens; local storage holds only a “signed in / not signed in” flag and no identity data.
• Display cache — purpose: remembering display details such as clinic name, role and the open tab until the tab closes; kept in session storage and never used for permission decisions.

3.1. Your interface preferences such as language, appearance (theme), menu state and the guided tour are kept in your browser’s local storage. They are not sent to the server, are not used for tracking and are removed when you clear your browser data.

4.1. We record which page or link brought you to us (first page, referring address and campaign tags) only if you allow it in the cookie card; if you open an account, the record is linked to it. If you do not allow it, nothing is stored.

4.2. You can withdraw your permission at any time from the “Cookie preferences” link in the footer of every page; withdrawing deletes the record.

5.1. No advertising cookies, no third-party tracking and no social media plug-ins are used. Fonts are served from our own servers, so opening a page does not send your IP address to a third-party font or analytics provider. Pages are served through a content-delivery and attack-protection network that processes your IP address for the security of the service and sets no cookie; it is listed on the Sub-processors page.

6.1. You manage the consent-based record from the cookie card or the “Cookie preferences” link in the footer. You can delete or block cookies in your browser settings; if essential cookies are blocked, signing in is not possible.

7.1. The mobile application uses no cookies; the session and preferences are kept in the device’s secure storage. Push notifications are explained in section 10 of the Privacy Policy.

8.1. Changes to this Policy are published in the Version history section. Questions: [email protected].

Earlier versions of this document and what changed in each:

• 29 October 2026 — Registration draft, registration hand-off, sign-in hint and display cache records added, with the first-party / legal-basis explanation.
• 20 October 2026 — First separate version (previously section 12 of the Privacy Policy); cookies listed with name, purpose and duration.