1. Understanding cookies and browser storage
A cookie is a small file your browser stores and may send to the website on later visits. Local storage and session storage also keep information in the browser; they are not sent automatically with every request.
Technology can collect technical information without setting a cookie. Your statistics choice therefore covers our optional measurement tools whether or not they use cookies. Browser settings can restrict or delete these storage mechanisms.
2. Sign-in, security and preferences
Sign-in cookies authenticate you, maintain your session and secure certain operations. They help display ‘Open Recodex’ when you are signed in. Declining statistics does not prevent these functions from working.
Language, theme and display preferences are separate from statistics. They remember your interface choices. Some storage is created only when you use the corresponding feature.
The identifiers below describe the main mechanisms in our web application. Durations are those configured in code; renewal, deletion, sign-out and browser rules may change their actual lifetime. A cookie’s lifetime is not the retention period for a clinical record or for all data held on our servers.
- Supabase session — sb-…-auth-token. Authentication and session refresh; values may be split across several cookies. The library sets a maximum of 400 days, renewable. Sign-in validity also depends on server session rules; signing out is intended to delete session cookies.
- Language — ipn-locale and ipn-preferred-locale. Language preference; configured for 365 days after writing or renewal.
- Google and Zoom connections — rx_gcal_…, rx_gmail_… and rx_zoom_…. Verification and continuity of an authorization you initiate; configured for 10 minutes, with deletion at certain callback stages. Account sign-in may also use a temporary Supabase verification cookie (code-verifier).
- Display — sidebar_state and clinical_ai_history_sidebar_…. Sidebar state or width; configured for 7 days after writing or renewal.
- Theme — recodex-theme. Display preference in local storage, without automatic expiry, until changed or cleared by you or the browser.
- Clinical consent step — consent_c1_signed. Technical indication of a signed step in the workflow, configured for 365 days. This cookie is not the consent document and does not replace checks against the record.
3. Optional statistics
With your permission, Vercel Analytics measures public website traffic and Vercel Speed Insights measures technical performance. Declining keeps these tools disabled. We do not enable them in sign-in, sign-up, admission, invitation or booking flows, or in client and clinician spaces. This cookie management page is also excluded from these statistics.
Depending on the tool, measurements may include the page visited, referring source, time, browser, operating system, device type, approximate location and loading metrics. Vercel describes these tools as not requiring cookies and providing aggregate statistics. Web Analytics uses a hash derived from the request; Vercel states that its visitor identifier expires after 24 hours. This is not a promise to delete all statistics within 24 hours.
Our filter restricts sends to allowed public pages and removes query parameters and fragments from the measured page’s address. These measurements are not intended to transmit questionnaire answers, clinical notes or record content. We do not use these tools to deliver targeted advertising to you.
Retention of measurements by the provider depends on the service and project configuration. It is separate from the 180 days during which your browser choice is recognized. You can request details from our privacy officer.
4. Accepting, declining or withdrawing permission
‘Accept’ permits optional statistics. ‘Decline’ keeps them disabled. Browsing, signing in or reading this policy is not acceptance. You can use the services without accepting statistics; the banner disappears after you respond.
You can change your choice below at any time. Selecting ‘Decline statistics’ after accepting blocks future statistics sends in this browser. Withdrawal does not automatically delete previously collected measurements or retroactively affect prior processing.
Your choice and its date are stored locally under recodex.analytics-consent.v1. They are recognized for 180 days, after which you are asked again. Local storage is not necessarily erased at expiry: an expired choice stops being treated as valid. If storage is unavailable, the choice may apply only to the current page session. Another browser, another device or cleared storage may trigger a new request.
Your choice covers optional statistics only. It is not consent to care, artificial intelligence, recording or sharing clinical information.
5. Browser settings and external services
You can also delete or block cookies and website data in your browser settings. Blocking sign-in cookies may sign you out or prevent access to certain features. Deleting your cookie choice triggers a new request, with statistics disabled by default.
Services such as Google, Zoom and Stripe may apply their own cookies when you use their features or open their pages. External resources may also receive connection metadata, including your IP address. Declining Recodex statistics does not set preferences for these independent services or block exchanges needed for a service you request.
Some providers may process information outside Québec. Our Privacy Policy addresses transfers, safeguards and your rights. Accepting statistics does not replace applicable legal obligations for this processing.
6. Questions, rights and updates
For questions about cookies, durations, providers or your rights of access, correction and withdrawal of consent, contact the person responsible for personal information at Recodex Clinique IA Inc.: recodexcliniqueia@gmail.com. Avoid including sensitive clinical information in an initial message.
You may also contact Québec’s Commission d’accès à l’information. This policy will be updated if our practices change; a new authorization will be requested where the change requires it. The update date appears at the top of this page.