01What cookies are#
Cookies are small text files a website stores in your browser so it can remember something between pages or visits, such as the fact that you are signed in. Browser storage and the storage an app keeps on your phone work in much the same way. This policy covers all of them.
02What we use#
MedTality uses cookies only to keep you signed in and to keep that sign-in secure. In particular, we do not use:
- advertising or retargeting cookies;
- analytics cookies, or any analytics or tracking script;
- cookies or pixels that follow you across other websites, including social media pixels;
- session recording or device fingerprinting.
We do not let other companies set cookies through our site. Our fonts are served from our own website, so loading a page does not contact a font provider.
03Cookies and storage#
On the web
These are strictly necessary: the website cannot sign you in without them. Because of that, the law in most places, including the European ePrivacy rules, does not require consent for them.
| Name | What it does | How long it lasts |
|---|---|---|
| better-auth.session_token | Keeps you signed in, so each page knows it is you. | Until you sign out or it expires. While you keep using MedTality it is renewed. |
| better-auth.two_factor | Holds your place between your password and your sign-in code, when two-step sign-in is on. | A few minutes, until you enter the code. |
| Sign-in with Google, Apple or LinkedIn | Short-lived cookies that tie the provider's reply to the sign-in you started, so no one else can finish it. | Minutes, until sign-in finishes. |
| medtality:employer:selected-org (browser storage, not a cookie) | Remembers which organization you were working in, if you belong to more than one. | Until you sign out, leave that organization or clear your browser's storage. |
On our live website, the sign-in cookies' names start with "__Secure-", which tells your browser to send them only over an encrypted connection. They are set by this website itself and cannot be read by scripts on the page. The storage entry is kept in your browser only, is never sent to us, and is checked against the organizations you belong to, so it cannot outlast your access.
In the mobile app
- Your session. Kept in your device's encrypted secure storage, so you stay signed in. Removed when you sign out.
- Offline copy. A copy of what you last saw, and any changes made while you were offline, so the app works on a poor connection and sends your changes when it reconnects. Kept on your phone only.
- Notifications. If you allow notifications, a token that lets us send them to this device. You can turn them off in your phone's settings or revoke the device in Settings.
04Other companies#
When you pay, you go to Stripe's own checkout page, and when you sign in with Google, Apple or LinkedIn, you go to theirs. Those pages may set their own cookies, for example to prevent fraud. They are governed by each company's own policy, not this one.
05Your choices#
Because these cookies are needed to sign in, there is nothing to switch off while you use the app. You can still remove them at any time:
- Sign out. Signing out ends your session and clears the sign-in cookie, or the session on your phone.
- Clear your browser. Every browser lets you delete cookies and site data for one site or for all of them, in its privacy or site settings.
- Block cookies. You can block cookies for medtality.com, but you will not be able to sign in while they are blocked.
- Remove the app. Deleting the mobile app removes what it stored on your phone.
We honor Global Privacy Control signals. Because we do not sell or share personal information for advertising, there is nothing more to opt out of.
06Changes and questions#
If we ever add a cookie, we will list it here before we use it, and ask for your consent first wherever the law requires it. For anything else, see our privacy policy or reach us through Support.