Cookies and your choices

Strictly necessary — always on

Sign-in and session security, the anti-forgery token on forms, your market and unit preferences, and the record of the cookie choice itself. These cannot be turned off because the site does not work without them, and no consent regime requires consent for them.

Analytics — off until you say yes

Aggregate page usage: which pages are read, which are not, where people give up. No health value ever reaches an analytics service — not a lab result, not a device reading, not a condition, not a medication, not a calculator input. That is enforced as a code boundary rather than as a configuration setting.

Marketing — off until you say yes

Measuring which campaign brought you here. We do not build health-interest audiences and we do not run behavioural advertising based on anything you do on this site.

Analytics runs on a legitimate-interest basis, but health data processing still requires your explicit, separate consent first.

The gate is the absence of a stored answer, not the presence of a rejection. No analytics or marketing script loads until you have actively chosen, and the record of your choice carries the policy version — so when this notice changes materially, we ask again rather than assuming your old answer still applies.

We also keep a server-side record of your choice as proof of consent, which is what several of these regimes require us to be able to produce.

• Our analytics provider, only after you consent to analytics.
• Our payment provider, on the checkout pages only, and only for the transaction.
• Map tiles on clinic pages, loaded from a map provider once you interact with the map rather than on page load.
• Nothing else. No advertising networks, no social trackers, no session recording, no fingerprinting.

• The control above clears your stored answer in this browser and the banner asks again.
• Your browser settings can block or clear cookies for this site entirely. The site stays readable; you will not be able to stay signed in.
• A Global Privacy Control signal from your browser is honoured as an opt-out of analytics and marketing without you touching the banner.
• Because the record lives in your browser, clearing site data anywhere also clears it — and your choice does not follow you to another device.