Cookie Policy

    This cookie policy explains what cookies are, how we use them on MedPix, and how you can control their use.

    Technologies strictly necessary for authentication, security and remembering your choices are used without prior consent. Google Analytics for Firebase is enabled only with your <strong>explicit consent</strong>. You may refuse or withdraw consent at any time.

    1. What is a cookie?

    A cookie is a small text file placed on your device (computer, smartphone, tablet) when you visit a website. Cookies allow the site to remember your actions and preferences (login credentials, language, font size, display preferences, etc.) for a given period of time.

    Cookies can be "persistent" (remaining on your device until they expire or are deleted) or "session" cookies (automatically deleted when you close your browser).

    2. Cookies used by MedPix

    2.1 Strictly necessary cookies

    These cookies are essential for MedPix to function. They cannot be disabled as they enable core features such as:

    • Authentication : Keeping your session securely logged in
    • Security : Protection against CSRF attacks and other threats
    • Load balancing : Correctly routing your requests to our servers
    • GDPR compliance : Remembering your cookie preferences

    Examples of strictly necessary trackers:

    • • auth_token - Firebase Auth authentication tokens (stored in IndexedDB, not cookies in the strict sense)
    • • csrf_token - Usage measurement consent preference (duration 6 months)
    • • session_id - Server-side session identifiers for Cloud Functions (session duration)

    2.2 Preference cookies

    These cookies allow us to remember your preferences to improve your experience:

    • Interface preferences : Theme (light/dark), language, layout
    • Functional preferences : Display options, default settings
    • Navigation state : Last page visited, open/closed sections

    Cookie examples:

    • • theme - Theme preference (1 year)
    • • language - Preferred language (1 year)
    • • sidebar_collapsed - Sidebar state (1 year)

    2.3 Usage measurement (consent required)

    With your consent, MedPix uses Google Analytics for Firebase to measure pseudonymous product journeys. This measurement requires your explicit consent, collected via the consent banner.

    • Google Analytics for Firebase : Session and product-step measurement without medical content
    • Security : no medical content is used for audience measurement
    • Advertising : No advertising targeting or advertising identifier collection

    No name, email address, patient identifier, photo, dictation or medical content is sent to Google Analytics. Analytics can be refused or withdrawn at any time.

    2.4 Third-party cookies

    Some third-party services we use may place their own cookies:

    • Firebase (Google) : Authentication, database, cloud storage
    • RevenueCat and payment channel : Subscription and payment management depending on the platform

    These services are GDPR-compliant and do not collect health data. Please refer to their privacy policies for more information:

    3. Cookie retention periods

    Cookie typeRetention period
    Session cookiesDeleted when the browser is closed
    Authentication cookiesAccording to Firebase session persistence, until sign-out or local deletion
    Preference cookies12 months
    Analytics cookiesAccording to Google Analytics settings; your choice is requested again after 6 months

    4. How to manage your cookies?

    4.1 Via the MedPix consent banner

    On your first visit to MedPix, a consent banner is displayed at the bottom of the page. You may at any time:

    • Allow or refuse Google Analytics with a single click
    • Modify your preferences by clicking the "Manage my cookies" link at the bottom of every page
    • Delete already-set cookies from your browser settings (see section 4.2)

    4.2 Via your browser

    You can also manage cookies through your browser settings:

    • Google Chrome : Settings → Privacy and security → Cookies
    • Firefox : Options → Privacy & Security → Cookies and Site Data
    • Safari : Preferences → Privacy → Cookies and website data
    • Edge : Settings → Cookies and site permissions → Cookies

    Warning: Blocking all cookies may affect the proper functioning of MedPix. Strictly necessary cookies must remain enabled to ensure security and access to your account.

    4.3 Private browsing

    You can use your browser's private browsing mode. In this mode, cookies are automatically deleted when the browsing window is closed.

    5. Cookies and health data

    🔒 Privacy commitment

    No health data or patient information is ever stored in cookies.

    Medical data (photos, notes, patient information) is stored in encrypted form on Google Cloud services located in the European Economic Area, mainly in the Paris region, on infrastructure certified HDS (Health Data Host) for the scope defined by Google Cloud.

    6. Changes to this policy

    We reserve the right to modify this cookie policy at any time. Any changes will be published on this page with an updated date. We encourage you to check this page regularly to stay informed about our cookie practices.

    7. For more information

    For any questions regarding our use of cookies:

    You can also consult the following resources:

    Last updated : July 23, 2026

    Chargement de MedPix

    Hébergé en Europe, certifié HDS