Only what the service needs to work

What we use

An HttpOnly session cookie for sign-in, a short-lived cookie that binds an authentication flow to the browser, language and display preferences, IndexedDB to queue care events while offline, and the cache required for the installable application.

Duration and control

Sign-in data expires or can be revoked from the sessions page. The authentication-flow value expires within minutes. Browser controls can clear storage, but doing so may sign you out or remove events that have not synchronized yet.

Analytics

No non-essential analytics provider may be enabled until its purpose, provider, retention and transfer are documented and a consent choice is provided where required.