Effective date: 2026-05-02.
1. What cookies we use
HealthDash sets a small number of cookies, all of which fall into strictly necessary or functional categories. We do not run third-party advertising trackers.
| Cookie | Purpose | Expiry | Category |
|---|---|---|---|
access_token |
Authenticated session | 15 min idle / 12h absolute | Strictly necessary |
refresh_token |
Renew access token without re-login | 30 days | Strictly necessary |
active_org |
Remember which org you last viewed | 90 days | Functional |
__cf_bm |
Cloudflare bot management | 30 min | Strictly necessary |
2. Third-party cookies
We do not run advertising or cross-site tracking. The only third party that may set a cookie via our domain is Cloudflare, for bot mitigation.
3. Your choices
Strictly-necessary cookies are required for the platform to function. You can clear functional cookies at any time via your browser. We honor Global Privacy Control (GPC) where applicable.