RxFolioCookie Policy
This website sets no advertising cookies and no analytics cookies. There is no tracking pixel, no advertising network, and no cross-site profiling. That is why you are not shown a consent banner: there is nothing optional to consent to.
Reading the legal documents
Browsing this site — including the Privacy Policy, Terms & Conditions, and every other page except the sign-in step of account deletion — requires no cookies at all. The pages are static files. No login is needed and nothing about your visit is stored by us for marketing purposes.
Storage used by the account-deletion page
The account deletion page must confirm who you are before it can delete anything, so it uses the minimum storage that a sign-in flow requires:
| What | Type | Purpose | Lifetime |
|---|---|---|---|
| Identity token | Held in page memory only — not written to storage | Authorize your deletion request | Discarded when the request completes or you leave the page |
| Sign-in state and anti-forgery values | Browser session storage, written by the Microsoft sign-in library | Complete the sign-in exchange and protect it against tampering | Cleared when you close the tab, sign out, or complete deletion |
| Google or Microsoft sign-in cookies | Set by accounts.google.com or login.microsoftonline.com |
Authenticate you with your identity provider | Governed by that provider |
The identity token stays in your browser and is sent only to the RxFolio API, over HTTPS, in the authorization header of the deletion request. It is never placed in a URL and is discarded once the request completes.
Hosting provider
This site is served by a commercial web host. That host may inject a small first-party performance script on HTML responses. RxFolio does not set analytics or advertising cookies, and we do not use that script to profile visitors or health data. It is not required to read these pages.
Third-party sign-in scripts
To offer Google and Microsoft sign-in, the account-deletion page loads the Google Identity Services script from Google. That script is loaded only on that page and is not present on any other page of this site, so reading the legal documents involves no third-party request. Google and Microsoft process your sign-in under their own privacy policies; see Privacy Policy § 16 and § 17.
Controlling cookies
You can block or delete cookies and site data through your browser settings. Because this site uses only what is strictly necessary, blocking storage does not affect reading any legal document. It will, however, prevent the sign-in step, so account deletion by that route will not work; in that case use the in-app option or email privacy@rxfolio.org.
In the RxFolio application
The mobile and web application uses equivalent device-level storage to keep you signed in, cache the current session in memory, and remember your preferences. This is described in the Privacy Policy § 21.
Changes
If we ever introduce a non-essential cookie or similar technology, we will update this page and obtain consent where the law requires it before that technology is used.
Questions: privacy@rxfolio.org.