Cookie Policy

Effective date: September 22, 2026

This explains the cookies and browser storage Care Tales uses on caretales.com, on module pages and in the chat widget organizations place on their own sites. Read it with our privacy policy.

There is no cookie banner today

We do not show a cookie consent banner and we have no consent management software. Every cookie listed here is set because the product needs it to work, except for Google Analytics on our marketing pages. We are building a consent banner for visitors in regions that require one. Until it exists, you can block or clear anything on this page in your browser settings.

Cookies we set

The sign-in cookies below are set for caretales.com and all of its subdomains, so signing in once covers both the Care Tales console and the provider portal.

session-token: keeps you signed in. Set when you sign in. It cannot be read by page scripts and is only sent over a secure connection.
session-remember: records that you chose to stay signed in, which extends a session from 12 hours to 14 days.
user-role: carries your role so pages render the right way. Your real permissions are checked again on our server on every request, so this cookie grants nothing by itself.
mfa-status: records whether your staff or provider account still needs to set up two-factor sign-in, so we can send you to that step.
session-scope: marks a session as shared across caretales.com, so the console and the provider portal recognize the same sign-in. It holds no personal information.
preview-role: lets Care Tales staff preview the site as another role. It is readable by page scripts and carries no authority.
i18next: remembers the language you picked.

Analytics

Google Analytics 4 runs on our marketing pages and sets its own cookies. It measures how people find and move around the public site.

Google Analytics is not loaded on module pages or on organization pages. If you arrive by a QR code or a patient link, no analytics cookies are set. You can block it with your browser settings or with Google's browser add-on.

Browser storage on module pages

Module pages mostly do not use cookies. They keep a few values in your browser's local storage:

a visitor id, so repeat visits from the same device can be joined
a chat visitor id for each organization
a session id for the current tab
the QR code or link you arrived from
your reading level and language
whether you dismissed a hint
your playback preferences for audio and video

These stay on your device. They are joined to the activity we record, which the privacy policy describes.

The chat widget on an organization's own site uses one sessionStorage key and sets no cookies. That key disappears when you close the tab.

Clearing them

Every browser can clear cookies and site data, usually under privacy settings. Clearing them signs you out, resets your language and gives you a new visitor id. It does not delete records already stored on our side. For that, write to support@caretales.com.

Changes to this document

We will post a new version here with a new effective date. When we add the consent banner we will say so here.

Contact

support@caretales.com