Cookies Notice

About this notice

This notice applies to chironahealth.com and its patient and conversation features. “Chirona”, “we” and “our” refer to the team operating this website. It covers cookies and similar storage on your browser or device. Our Privacy Policy explains the wider use of personal information.

Cookies are small pieces of data sent with website requests. Local storage and session storage keep information in your browser without attaching it to every request. The entries below are used for functions you request, account security and continuity of a conversation or inquiry.

Our current use

We do not currently use advertising cookies, advertising pixels or third-party audience analytics on this website. We do not use the storage listed here to follow you across unrelated websites or build advertising profiles.

Reading public pages does not require a patient account. Some entries below are created only when you sign in, submit an inquiry or use conversation features. Your language is selected through the page address, rather than a language-tracking cookie.

Sign-in and account security

Supabase authentication cookies — names beginning with sb- and containing auth-token — keep your authenticated session and allow secure session renewal. Long values may be split into numbered cookie parts. Chirona uses Supabase to provide this functionality.

The configured cookie lifetime is up to 400 days from the latest setting or renewal; browser limits may shorten it. This is a browser storage lifetime, not a promise that a login remains valid for that period. Session credentials can expire or be revoked earlier. Signing out removes the current authentication cookies.

Related Supabase cookie names ending in code-verifier, including flow-specific variants, hold temporary verification values for an email sign-in or password-recovery flow. Their browser storage uses the same maximum lifetime above; the verification value may stop being usable earlier and may be consumed, replaced or cleared by the authentication flow.

care-password-setup is a temporary security cookie that confirms recent email verification when you set or reset a password. It lasts up to 10 minutes and is cleared when the operation completes or you sign out.

Linking your inquiry

care-claim- followed by a case identifier is created when you submit an inquiry. It helps prove that the browser requesting to link an inquiry to a verified account is the browser that submitted it. It lasts up to 7 days and can be removed after a successful claim.

This cookie contains a verification token. Possessing the token alone does not give access to another patient’s records. Clearing it may mean that we need another way to verify your request.

Conversation storage

chirona-ai-guest is a first-party cookie used when a guest conversation session is established. It connects the browser to its guest history and usage allowance without a signed-in account. It lasts up to 30 days. It is removed when guest history is successfully linked to a verified account.

chirona-ai-conversation uses session storage to remember the selected conversation identifier in a browser tab. It does not contain message text. It normally lasts for that tab’s session and may be restored by your browser’s session-restore feature.

chirona-ai-handoff uses local storage to carry a first message into a conversation page you choose to open. It can contain the message text. The handoff is accepted for up to 2 minutes and is removed when the matching conversation page reads it, when the handoff is cancelled, or when a later handoff replaces it. If it is never read or cancelled, the stored text can remain until replaced or you clear site data; the 2-minute validity limit does not automatically erase it.

On a shared device, sign out and clear site data when you finish. Clearing guest identifiers may permanently prevent you from reopening guest conversations through that browser. It does not itself delete server-held messages or case records.

Your choices

You can inspect, block or delete cookies and other site data in your browser’s privacy settings. Blocking necessary storage can prevent sign-in, inquiry linking or conversation continuity. You can still read public information and contact us by email.

These functional entries are not optional advertising settings, so the website does not present an “accept all” advertising-cookie choice. If we introduce optional tracking, we will explain it and provide any consent or opt-out control required before that use begins.

Links to messaging, social media and other external websites take you to services with their own storage practices. A link does not give us control over cookies set after you open that service.

Changes and questions

We update this notice when the storage used by the website changes. The date above identifies this version. Contact us for help identifying a Chirona storage entry or to make a request concerning server-held information.

• Read our Privacy Policy