Cookie Policy

Cookies are small text files that are placed on your device (computer, tablet, or mobile phone) when you visit a website. They are widely used to make websites function correctly, work more efficiently, and to provide information to the website operators. Cookies cannot execute code, carry viruses, or access information on your device beyond what the issuing website has stored in them.

In addition to cookies, Health 206 may also use similar technologies such as session storage, local storage, and JWT (JSON Web Tokens) to manage authentication state. These are governed by the same principles set out in this policy.

Health 206 uses cookies strictly to provide core platform functionality — primarily authentication and session management. We do not use cookies to track your browsing behaviour across third-party websites, to build advertising profiles, or to sell data to any marketing platform.

Our cookie usage falls into three categories:

Essential cookies are necessary for the platform to function. Without these cookies, you cannot log in, and the platform cannot verify your identity to retrieve your health records securely. These cookies do not require your consent under applicable law because they are strictly necessary to deliver a service that you have explicitly requested.

• Authentication tokens — issued by Supabase Auth upon successful login, these store your encrypted session. They ensure you remain logged in as you navigate between pages and that all database queries are securely scoped to your account.
• CSRF protection tokens — short-lived tokens used during login and sensitive actions to prevent cross-site request forgery attacks.
• Code verifier cookies — used during the PKCE (Proof Key for Code Exchange) authentication flow to securely exchange authentication codes. These are deleted immediately upon successful login.

Essential cookies contain no personal health information. They contain only encrypted tokens referencing your account identifier.

At present, Health 206 does not deploy third-party analytics cookies (such as Google Analytics, Mixpanel, or similar services). As a healthcare platform, we apply the principle of data minimisation — we collect only the data strictly required to provide and improve the service.

If we introduce analytics tools in the future, we will update this Cookie Policy in advance, present you with a cookie consent banner, and ensure that analytics cookies are only activated upon your explicit opt-in consent. Analytics cookies will never have access to your medical records or health data.

Functional cookies enable enhanced features that improve your experience but are not strictly essential to the core service. On Health 206, functional cookies may include:

• Cookies set by Vercel (our hosting provider) for deployment infrastructure and preview environment routing. These are technical in nature and do not store personal health data.
• Language or display preference cookies, if such preferences are introduced in a future version of the platform.

The following table lists the specific cookies currently used on the Health 206 platform:

You have the right to manage or disable cookies at any time through your browser settings. The steps vary by browser:

• Google Chrome:Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox:Settings → Privacy & Security → Cookies and Site Data
• Apple Safari:Preferences → Privacy → Manage Website Data
• Microsoft Edge:Settings → Cookies and Site Permissions → Cookies and Site Data

Please be aware that disabling or deleting the essential authentication cookies will prevent you from logging into Health 206. You will be logged out and will need to sign in again to access your health records. The platform cannot function correctly if essential cookies are blocked.

To delete all cookies set by Health 206, clear site data for the Health 206 domain in your browser settings. This will terminate your active session.

As Health 206 currently uses only strictly necessary cookies and does not deploy third-party tracking or advertising cookies, a cookie consent banner is not displayed at this time. If we introduce non-essential cookies in the future, we will update this policy, add a consent mechanism to the platform, and obtain your explicit consent before placing any non-essential cookies on your device.

This policy is in line with the requirements of the Information Technology Act, 2000 and the SPDI Rules, 2011. If and when the Digital Personal Data Protection Act, 2023 comes into full effect, we will update our consent mechanisms accordingly.

We may update this Cookie Policy periodically to reflect changes in our technology, legal obligations, or practices. The “Last updated” date at the top of this page will be revised whenever we make material changes. We encourage you to review this policy periodically.

If you have any questions about our use of cookies, please contact us at info@health206.com.