Cookie and Storage Policy

Last updated: October 26, 2026

1. What are cookies and storage technologies?

MedFiles.ai uses a session cookie and local storage technologies (localStorage in web browsers and SecureStore in the mobile apps) to keep you signed in, remember your preferences and improve your experience. Local storage works like cookies, but what it saves stays on your device.

2. Essential StorageAlways active

Necessary for the basic functioning of the application. On the website we use a secure session cookie and your browser's local storage; in the mobile apps, SecureStore (encrypted storage).

NamePurposeDuration
medfiles_auth_tokenKeeps you signed in on the website: a secure session cookie, and your sign-in token in your browser's local storage (the token lasts up to 30 days)Up to 7 days
medfiles_userAuthenticated user dataSession
medfiles_active_profileSelected active profileSession
medfiles_cookie_consent_v2Remembers your cookie choice12 months

3. Functional StorageAlways active

Remembers choices you make in MedFiles, such as your language. It stays on your device and is not used to track you. There is no switch for it: it is always active.

NamePurposeDuration
medfiles_languagePreferred languagePersistent
medfiles_hasSeenWelcomeOnboardingIndicates if the welcome tutorial was seenPersistent
medfiles_ai_consent_not_nowUser chose "not now" for AI consent promptPersistent
medfiles_hasSeenQuickHistoryIndicates if the quick history onboarding was seenPersistent
medfiles_dismissedRemindersIDs of dismissed medical reminder cardsPersistent
medfiles_locationPromptDismissedSession-only: location permission prompt dismissed (sessionStorage)Session
medfiles_acquisition_first_touchRemembers how you first arrived at MedFiles (the page, and the link or ad that brought you), so that if you create an account we know which campaign brought youUp to 30 days

4. AnalyticsOptional

This is the Analytics choice in the cookie banner. We use Google Analytics 4 (GA4) and Metricool to measure visits to our public pages (such as the home page, pricing, articles and sign-up) and to the welcome page after you register. They never load on the pages where you manage your health information. With Analytics on, Google Analytics may store cookies to tell repeat visits apart. With it off, Google Analytics only counts visits anonymously, without cookies or identifiers. Metricool counts visits whatever you choose.

NamePurposeDuration
_ga, _ga_*Google Analytics 4 (GA4): Site usage measurement (Google)~90 days
MetricoolMetricool: visit counting on our public pages (Metricool)Set by Metricool

5. AdvertisingOptional

This is the Advertising choice in the cookie banner. We use Google Ads (gtag.js) and Meta Pixel (Facebook) to measure how our ad campaigns perform, on the same public pages and never on the pages where you manage your health information. With Advertising on, Meta and Google may link your activity to an advertising profile and show you personalized ads. With it off, the ads are still measured, but your activity is no longer used to build that profile.

NamePurposeDuration
_fbp, _fbcMeta Pixel: Conversion tracking and ad measurement (Meta/Facebook)~90 days
_gcl_aw, _gac_*Google Ads (gtag.js): Conversion tracking and remarketing (Google)~90 days

6. How to manage storage?

You can delete stored data at any time from your browser settings (localStorage) or from the mobile application settings. Note that deleting essential storage will log you out and you will need to log in again.

Note: In the mobile apps, your session is stored encrypted using SecureStore (Keychain on iOS, EncryptedSharedPreferences on Android); other preferences are stored in the app's local storage.

7. More information

For more information about how we protect your data, see our Privacy Policy.

If you have questions, contact us at support@medfiles.ai