Cookie Policy

Cookies are small text files stored on your device that help websites work and understand how they're used. This page explains how we use them on the public site and member portal.

Cookies we use

• Essential — theme. Remembers light/dark preference so pages stay readable.
• Essential — portal session. After you sign in with a magic link, a secure HttpOnly cookie (chw-member-token) keeps you signed in (up to 7 days). Health records, messages, and documents require a recent sign-in (about 4 hours) for extra privacy.
• Essential — staff admin session. Staff use separate secure session cookies for the admin area (including single sign-on where configured). These are not used for public visitors.
• Analytics (optional, first-party only). If you choose Accept analytics on the consent banner, we store a preference in local storage and collect page views, clicks, funnel steps, device class, time spent, and — when you are signed into the portal — your account name/email so we can improve the service. No ad networks and no other third-party analytics. Choose Essential only to decline.
• Site delivery analytics (Cloudflare, always on). Cloudflare delivers this site and counts page views and page-load times with its Web Analytics. This runs for every visitor, whichever choice you make on the banner. It sets no cookies, stores nothing in your browser, and does not track you across other websites.
• Security and site-health analytics (Kief Studio, always on). This site uses Kief Studio’s self-hosted, cookieless analytics for security and site health. It keeps a random ID in session storage that is deleted when you close the tab, and it does not run if your browser sends Do Not Track or Global Privacy Control.
• Bot protection (if enabled). Services such as Cloudflare Turnstile may set cookies when you submit forms, to reduce spam.

Managing cookies

You can control or delete cookies through your browser settings. Blocking essential portal cookies will sign you out and prevent private features from working. Clearing cookies does not delete health data stored on our servers — use Privacy & data to export or revoke consent, or contact us for deletion requests.

More information

See our Privacy Policy for how we handle personal and health information, or email [email protected].