Storage Transparency

DOCFO Cookie & Storage Policy

Last Updated: October 16, 2026

Privacy-First Storage Architecture

DOCFO does not use third-party advertising cookies, cross-site behavioral tracking scripts, or data broker pixels. We use only strictly necessary session cookies required for authentication and security, plus optional performance telemetry.

1. What are Cookies and Local Storage?

Cookies are small text files placed on your device by websites you visit. Similar technologies include browser local storage, which saves preferences directly within your browser. These tools enable web applications to maintain your login session as you navigate across pages.

2. Cookies and Storage Used on DOCFO

A. Strictly Necessary Authentication Cookies

Mandatory

These cookies are essential for the operation of the DOCFO Clinic Portal and secure API endpoints. They verify your identity with Supabase SSR authentication, validate anti-CSRF security tokens, and maintain encrypted session states.

Identifier	Provider	Purpose	Duration
sb-*-auth-token	Supabase	Stores encrypted session token for authenticated clinic/admin users	Session / Refresh cycle
sb-*-code-verifier	Supabase	PKCE authentication security verification against CSRF	Auth handshake

B. Functional Local Storage

Functional

Used by the browser to remember non-sensitive user interface preferences so you don’t have to reconfigure them on every page visit.

Key	Type	Purpose	Duration
docfo_cookie_preferences	Local Storage	Stores your cookie consent choices	1 Year / Persistent
docfo_active_clinic_id	Local Storage	Preserves clinic selection for multi-clinic managers	Persistent

3. Managing and Disabling Cookies

You can configure your browser to block or alert you about cookies. However, blocking strictly necessary authentication cookies will prevent you from signing in to the Clinic Portal.

4. Contact Our Privacy Team

If you have questions about our cookie or local storage practices, please write to privacy@docfo.in.