Essential technology and optional measurement stay separate.

Technical components needed for secure access operate by default; usage and performance measurement starts only with your choice.

Essential components

The authentication provider uses session identifiers for secure account access. The stoko_locale language preference is kept for up to 12 months and the stokontrol.cookie-consent.v1 preference record for up to 180 days in the browser. A versioned draft of business settings entered during initial clinic setup is kept per user and clinic in the browser to prevent loss after a refresh or connection interruption; it becomes unusable after 24 hours and is removed the next time setup opens. It is also cleared after successful completion or when switching accounts from setup, and contains no patient data. These essential records remain separate from optional analytics.

Optional measurement

Vercel Web Analytics and Speed Insights run only with your permission and only on public marketing and legal pages; they do not run on sign-in or registration forms or inside clinic and laboratory workspaces. Stokontrol's first-party measurement may record the consented page path, feature or action key, internal or external referrer category, usage duration, device and browser type, approximate country and city, and a random per-tab measurement session identifier. When you are signed in, these events may be linked to your account and workspace; management reports are aggregated. First-party event rows are deleted by the next daily cleanup after reaching the 180-day retention threshold; the replay-prevention identifier and one-way request fingerprint are deleted by the next daily cleanup after reaching 181 days. A keyed one-way pseudonymous abuse-prevention key derived from the raw IP is removed by the next daily cleanup after its 48-to-72-hour threshold; the random signed stoko_analytics_subject cookie is kept for up to 180 days. These analytics event records do not contain raw IP addresses or patient-form contents. External providers apply their own retention terms. Declining measurement does not block an early-access account or core product use.

Managing preferences

Use the cookie panel to keep essential components only, allow measurement, or reopen and withdraw your choice later. The choice is requested again after no more than 180 days; withdrawal sends denial signals and clears both accessible analytics cookies and the HttpOnly Stokontrol measurement cookie on the server.

Contact

Send cookie or privacy questions to Doğuş Sevinç at info@stokontrol.com.