Legal
Cookie Policy
Last updated Oct 30, 2026
We keep cookies to the minimum needed to run the site and the dashboard. No cookie used here contains health information, and we do not run third-party advertising trackers inside the authenticated product.
1. Strictly necessary
A session cookie keeps you signed in to the dashboard. It is HttpOnly, Secure and SameSite=Lax, and expires after 7 days of inactivity.
A CSRF token cookie protects form submissions and API writes originating from the dashboard. Neither cookie can be disabled without breaking the product.
2. Preferences
A locale cookie remembers your language choice so the site does not reset to English on each visit. It stores a language code only and expires after 12 months.
3. Advertising on public pages
Public marketing pages may display Google AdSense units when advertising is enabled. Google may set cookies to measure and personalise ads; where required by law, ads are shown non-personalised until consent is given.
Authenticated areas — dashboard, checkout, admin console and result pages — never load advertising scripts.
4. Managing cookies
You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will prevent sign-in. To opt out of personalised advertising, use Google Ads Settings or your regional consent tool.
Questions about this document? Write to [email protected]. This page is provided in English; translations are offered for convenience and the English version prevails.