Draft — pending legal review. This document describes how MedClinora works today, while the product is in development. It will be reviewed and may change before MedClinora is generally available.
The short version
MedClinora uses cookies that are strictly necessary for signing in and keeping your account secure. On the public website only, Google Analytics sets cookies to count visits; you can turn it off at any time (below). We don’t use advertising cookies, and analytics never runs inside the application.
Cookies we use
| Cookie | Purpose |
|---|---|
clinicora.session_token | Keeps you signed in. Set when you sign in; ends when you sign out or after 3 days without activity. |
clinicora.two_factor | Lasts 10 minutes. Remembers that you are part-way through two-step sign-in. |
clinicora.state | Lasts 5 minutes. Protects the Google or Facebook sign-in round trip, only if you choose to sign in with them. |
clinicora.known_device | Lasts 180 days. Set after you sign in: a random device ID and a one-way code derived from your email. Used only so that someone else’s failed sign-in attempts can’t lock your usual browser out. Sent only to the sign-in service. |
clinicora.invitation_handoff | Lasts 15 minutes and is encrypted. Carries a team invitation through Google or Facebook sign-in; deleted when it is used. |
These cookies are httpOnly (not readable by page scripts) and are marked Secure when the site is served over HTTPS, where their names start with __Secure-.
Google Analytics (public website only)
The public pages (home, features, pricing, legal pages and similar) load Google Analytics unless you turn it off with the button below. It sets _ga and _ga_<ID> cookies (up to 2 years) holding a random visitor ID. We send it only the page address, never link codes or query details, and nothing from the application, sign-in, client forms, appointments, or video visits.
Turning it off is remembered in your browser’s storage (medclinora.analytics-consent), not in a cookie, and is never sent to us. It stops analytics at once and deletes its cookies.
Website chat
If a clinic adds MedClinora’s chat to its website, the chat window keeps one item in the visitor’s browser storage (named clinicora.chat. followed by the clinic’s chat ID) so the conversation continues as the visitor moves between pages. It holds a random session key, not the messages, and the session ends after a day without activity or seven days at most. The chat sets no cookies.
Managing cookies
You can block or delete cookies in your browser settings, but you won’t be able to sign in without them. Questions? See our Privacy Policy or contact us.