Cookie Policy

Strictly necessary cookies

These are required for the platform to work and are set regardless of your analytics choice. They are not used for tracking.

__session — holds your authentication token so the server can verify who you are. Expires after one hour and is cleared when you sign out.

sidebar_state — remembers whether the navigation sidebar is expanded. Expires after seven days.

e4_consent — records your analytics choice so we can honour it, including on the server. Expires after 180 days.

Analytics cookies

These are set only after you press Accept. If you decline, or simply never choose, the Google Analytics script is never loaded and these cookies are never created.

_ga and _ga_<id> — set by Google Analytics 4 to distinguish one browser from another so repeat visits are not counted as new people. They typically expire after two years.

You can withdraw your consent below at any time. Withdrawing stops any further collection; it does not delete data already collected, which you can request separately using the contact address in our Privacy Policy.

What analytics records

The page path you visit, with the query string removed and document identifiers replaced by a placeholder. Which AI tool was run, whether it succeeded or failed, the category of failure, and a coarse duration band. Whether you were signed in, as a simple yes or no.

Advertising storage, ad personalisation and ad user data are set to denied permanently and are never granted, even after you accept.

What we never send

No patient data of any kind. No text you typed into a tool. No error messages or stack traces, even after redaction. No uploaded file names. No user ID, role, or institution identifier. No page titles, since a title can contain a study name.

The Clinical Record Anonymizer is excluded from analytics entirely — no script is loaded on that page and its Content-Security-Policy forbids any request to Google.