1. What this policy covers
This page explains how mymdcat uses cookies and similar browser storage. It covers the website and the app. It does not cover a third-party site that you open from a link.
A cookie is a small file that a site stores in your browser. Browser storage, such as localStorage, works in a similar way. This page calls both “storage” where the difference does not matter.
2. Your choice
Necessary storage keeps the service working. We do not need your permission for it because the service cannot work without it.
Optional storage starts only after you select Accept on the cookie banner. Reject keeps optional storage off. Your choice is stored in your browser under mdcat:cookie-consent. We do not send that value to our servers.
You can change your choice at any time. Section 6 explains how.
3. Necessary storage
These items keep you signed in and keep the service safe.
| Name | Purpose | Lasts | Provider |
|---|---|---|---|
| sb-<project>-auth-token | Sign-in session. Keeps you signed in across page loads. | Up to 30 days of inactivity, then cleared on sign-out. | Supabase |
| __cf_bm | Bot protection. Helps Cloudflare tell a person from an automated request. | 30 minutes | Cloudflare |
| Theme preference | Remembers light, dark or system theme. | Until you clear browser storage. | mymdcat |
| mdcat:cookie-consent | Remembers your Accept or Reject choice. | Until you clear browser storage. | mymdcat |
4. Optional storage
These items start only after you select Accept. They help us find a broken screen and see which pages are slow.
| Name | Purpose | Lasts | Provider |
|---|---|---|---|
| PostHog storage | Product analytics. Page views and product events. We send opaque IDs, route paths, counts and durations. We do not send your answers, notes or chat text. | Up to 12 months, unless you clear it. | PostHog (United States) |
| Sentry session storage | A short replay of the page state when an error occurs, plus a sample of performance timings. Replays fire on errors only. Inputs are masked. | 30 days, then auto-delete. | Sentry |
5. What we do not use
- Advertising cookies.
- Third-party tracking pixels for ads.
- Full-session replay recordings.
- Cross-site cookies that follow you to another website.
- Cookies that sell your data.
6. How to change your choice
You have three ways to change your choice:
- Clear the site data for mymdcat.com in your browser. The banner appears on your next visit.
- Open your browser settings and block optional storage for this site. Necessary storage must stay on or you cannot sign in.
- Email support@mymdcat.com if you are stuck. We help you change the choice.
Your browser may send a Do Not Track signal. We do not use that signal as a consent choice. Use the banner or the steps above.
7. More about your data
The Privacy Policy explains what we collect, why we use it, who processes it and how to access or delete it.
8. Changes to this policy
We can update this policy. The date at the top shows the version you are reading. If a change adds a new optional cookie, we ask for your choice again before the new cookie starts.
Questions about cookies?
Email support@mymdcat.com or message us on WhatsApp. We reply within two working days.