Cookies
A single cookie, set only if you sign in, and no trackers.
The session cookie
When you sign in, the site sets the “clinical_session” cookie. It contains a signed token identifying your account, and nothing else. It expires after 48 hours, and signing out deletes it.
Page scripts cannot read it (HttpOnly) and it is never sent by another site (SameSite=Strict). As it is essential to stay signed in, it does not require consent.
Browser storage
Two preferences are kept in your browser, and never sent to the server:
- “ctapp.locale”: the interface language, French or English;
- “ctapp.profile”: the path chosen after signing in, patient or professional.
No trackers
No audience measurement, no advertising, no social media buttons, and no resources loaded from another site.
Deleting them
Signing out deletes the session cookie. Your browser settings let you delete the cookie and both preferences at any time.