Cookie Policy

1. What cookies are

Cookies are small text files a website stores on your device. We use them only to operate the platform - chiefly to keep you securely signed in and to protect your session - not to track you across other sites or to serve advertising.

2. Cookies we use

• dhw_session (strictly necessary): a secure, HTTP-only, SameSite cookie that keeps you signed in to your account and binds the session to your device. Without it you cannot stay logged in.
• dhw_session_modules (strictly necessary): a short-lived cache of which clinical modules your session may see, so navigation renders correctly without an extra round-trip. It contains no personal data and expires with your session.
• dhw_beta (strictly necessary, pre-release deployments only): set only when a deployment runs behind a pre-release access gate, to remember that you passed it. Not set on the public production service.

We do not set third-party advertising cookies.

3. Other storage on your device

Beyond cookies, the platform stores some information in your browser's local storage so the service works reliably on slow or intermittent connections. We list it here for completeness - none of it is used for advertising, profiling or cross-site tracking:

• Offline clinical data (community/CHW workflows): held in an encrypted on-device store (AES-GCM) so community health workers can keep working without a network, and synchronised when connectivity returns.
• Your signed-in session: for the patient portal, your access token and the name shown in the header; for staff, a small non-clinical snapshot of your session and the facility you are acting in, so the interface renders correctly after a reload.
• Unsent form drafts: if you are part-way through a long form (for example an antenatal visit or an encounter note) the entry is saved on your device so a crash, reload or flat battery does not lose your work. Drafts are kept for up to 7 days and then discarded automatically. Clear them at any time by signing out and clearing site data.
• Preferences and operational state: language, notification sound, which navigation groups you have collapsed, list filters, a device identifier used for sync, and short-lived references for an in-progress payment.

Signing out clears your session; clearing site data in your browser removes all of the above. On a shared or public device we recommend you sign out and clear site data when you finish, so no draft or session information is left behind.

4. Managing cookies

Because our cookies are strictly necessary, disabling them in your browser will prevent you from signing in and using the service. You can clear or block cookies through your browser settings at any time; signing out also clears your session.

5. Changes

If we ever introduce non-essential cookies, we will update this policy and request your consent first. See our Privacy Policy for how we handle personal data generally.

6. Contact

Questions about cookies? Email hello@chartchronicle.com.