Cookie Usage Policy

HealRecords uses cookies to provide secure authentication and to maintain your selected hospital context while you use the application.

1. Authentication Cookie

HealRecords uses an authentication cookie containing a security access token. This token is used to verify that you are an authorized user when accessing protected areas of the application.

The authentication cookie:

• Is used only for authentication and session management.
• Is not used for advertising or tracking.
• Helps prevent unauthorized access to your HealRecords account.
• May expire or be invalidated when your session ends or when the token expires or is revoked.

2. Hospital Identification Cookie

HealRecords also uses a cookie to store the hospital identifier associated with your current session. This helps the application determine the appropriate hospital context when processing your requests.

This cookie is used for application functionality and is not used for advertising or behavioral tracking.

3. Security

HealRecords applies appropriate cookie security controls, such as Secure, HttpOnly, and SameSite settings where applicable, to help protect authentication information from unauthorized access and cross-site attacks.

Authentication cookies should not be accessed or modified through application JavaScript when the HttpOnly attribute is enabled.

4. Third-Party Tracking

HealRecords does not use these cookies for advertising, profiling, or cross-site behavioral tracking.

5. Managing Cookies

Because these cookies are required for authentication and core application functionality, disabling or deleting them may prevent you from logging in or using protected areas of HealRecords.

You can manage cookies through your web browser settings. However, disabling required cookies may affect application functionality.

6. Changes to This Policy

We may update this Cookie Usage Policy when our application, security practices, or legal requirements change. Any significant changes will be communicated through the application or our website.