What cookies. Why.

We use cookies sparingly. Strictly-necessary cookies are always on (login, security, language preference). Analytics and marketing cookies are off by default — you decide via the cookie banner, and you can change your mind anytime by clearing the dc_consent cookie or contacting us.

Following IAB TCF v2.2:

• Strictly necessary — login session, CSRF token, language and region (dc_geo), theme (dc_theme), consent preferences (dc_consent). Cannot be turned off.
• Analytics — anonymised usage to improve the product. Off by default. We use Plausible (cookie-less) and GA4 (cookies, anonymised IP).
• Marketing — campaign measurement only, no profiling on health data. Off by default. Meta Pixel only fires after consent.

• dc_session · necessary · session, login
• dc_csrf · necessary · session, CSRF token
• dc_geo · necessary · 12 months, region routing
• dc_theme · necessary · 12 months, light/dark/auto
• dc_consent · necessary · 13 months, your cookie preferences
• _ga / _ga_* · analytics · 13 months, GA4
• _fbp · marketing · 90 days, Meta Pixel

Plausible does not set cookies.

Use the cookie banner shown on first visit. Re-open it any time by clearing dc_consent in your browser's site-data tools. You can also block cookies in your browser settings — if you do, the strictly-necessary set are still required for login and security.

Browser-level controls: Chrome → Settings → Privacy & Security · Safari → Preferences → Privacy · Firefox → Preferences → Privacy & Security.

Marketing analytics retained 13 months from your last interaction, per the NDPC cookie guidance. Strictly-necessary cookies expire on logout or per durations listed above.

See the privacy policy for how the data behind these cookies is processed, and the data-rights form to access, correct, port, or delete it.