IndianHealthPulse.com — Cookie Policy

1. What this policy covers

This Cookie Policy explains cookies and similar technologies used on IndianHealthPulse.com. It covers browser cookies, local/session storage, pixels, SDK identifiers, and similar mechanisms where deployed. It should be read with Part I. The exact inventory below must match the live website.

A cookie is a small item of information stored by a website in a browser. Some are removed when a session ends; others remain until expiry or deletion. Local storage can persist without a cookie-style expiry and must be assessed separately. “First-party” and “third-party” describe who sets or controls a technology, not whether it is harmless or necessary.

2. Categories and choices

Strictly necessary: technologies genuinely needed for an explicitly requested service, such as account sessions, security, or remembering privacy choices. These are limited to the disclosed necessary purpose; an advertising identifier is not “necessary” merely because it helps fund the site.

Preferences: optional choices such as remembering language or display settings when not essential to the requested function. The inventory explains which preference storage is used and why.

Analytics: optional measurement of usage and performance beyond necessary service/security operations. We use these only after the relevant choice is enabled under our configured consent approach.

Advertising/marketing: optional identifiers or pixels used to measure campaigns or personalise advertising if actually deployed. They must be separately identified and controlled. They must not receive medical records, health-query text, sensitive form contents, or private clinical identifiers.

Third-party media/maps: embedded videos, maps, chat widgets, or other content may introduce external requests or storage. Where optional tracking is involved, use click-to-load or equivalent controls and explain that enabling the embed may send information to its provider.

3. Consent controls

The website does not currently provide an optional-cookie consent banner or a category preference manager. No optional analytics or advertising tags were identified in the reviewed application code; hosting-level telemetry and third-party storage have not been fully inventoried. This is not a claim that no third-party processing occurs.

Use the browser controls described in section 5 to inspect or clear website data. The footer links to this Cookie Policy and its browser-control guidance, not to an unavailable preference manager. Contact support@indianhealthpulse.com for cookie or privacy requests.

If optional tracking is introduced, its providers, purposes and controls must be disclosed and the required choice obtained before activation. Continuing to browse is not consent to optional tracking.

4. Actual cookie and storage inventory

Account session: Lovable Cloud authentication stores the signed-in session in first-party browser local storage, using a project-specific key with an sb- prefix and -auth-token suffix. It contains session tokens and account information, supports requested sign-in and session renewal, and persists across browser sessions. Signing out clears the current stored session; clearing site data also removes it. Session expiry and renewal follow the authentication service configuration.

Language preference: ihp-lang is a first-party local-storage key set when you choose a language. It contains the language code, is used by IndianHealthPulse to remember your selection, and has no automatic local-storage expiry. Change it using the Language selector or remove it by clearing site data.

Analytics, advertising and consent logs: no dedicated application tags or consent-log storage were identified in the reviewed code. A full inventory of platform telemetry, cookies set by infrastructure and any external embeds is still unverified; this policy does not supply invented identifiers or retention periods.

External services: following a map, news, WhatsApp or other external link sends you to a separate provider. Its own storage and privacy rules apply. External links and any embedded content must be assessed individually; a complete embed inventory is not yet confirmed.

Service-provider information: Lovable publishes its privacy notice at https://lovable.dev/privacy. OpenAI publishes its privacy policy at https://openai.com/policies/privacy-policy/. These notices do not replace this website’s obligations.

5. Browser, device, and account controls

Browsers generally allow you to inspect, delete, or restrict cookies and website data. Instructions differ by browser and device. Restricting necessary storage can affect sign-in, saved preferences, or other requested functions. Private browsing does not prevent every form of tracking or erase information already sent to a server.

Your choices may need to be set separately for another browser/device or after clearing website data.

Disabling an advertising identifier in device settings is an additional control, not necessarily a replacement for website choices.

Optional-tracking refusal should not prevent ordinary access to public patient-education content. Where an optional embed is disabled, provide a useful alternative such as a plain address, text explanation, or clearly labelled external link.

6. Health-related pages and forms

Private medical information, symptoms, enquiry text, report filenames, authentication tokens and patient identifiers must not be supplied to advertising or unnecessary analytics. Page URLs, searches and referrers can reveal health interests. Sensitive flows should be excluded from any optional tracking introduced later; full hosting-level telemetry exclusions have not yet been verified.

7. Cookie-policy changes and contact

We will update this policy when relevant technologies or purposes change and seek fresh permission where required. Contact support@indianhealthpulse.com with cookie questions. For browser storage controls, see section 5 above. The grievance route in the Privacy Policy also applies.