Cookies & local storage notice

Edition: 2026-05-26 — under the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK GDPR. Supervisory authority: the Information Commissioner's Office (ICO).

1. What we store

Name	Type	Purpose	Lifetime	Essential?
`vma_portal_at`	cookie (HttpOnly)	Patient portal login token (Bearer)	Until logout / 60 minutes	Strictly necessary
`vma_portal_rt`	cookie (HttpOnly)	Refresh token (Bearer)	30 days	Strictly necessary
`vma_portal_lang`	localStorage	Selected UI language	Persistent	Functional preference
`vma_cookie_ack`	localStorage	Records that user dismissed this banner	Persistent	Strictly necessary

No third-party tracking cookies. No analytics. No advertising. No fingerprinting.

2. Legal basis

Strictly-necessary entries are exempt from the consent requirement under PECR regulation 6(4) (storage strictly necessary to provide a service explicitly requested by the user). The one functional entry — the language preference — is written only after the user has dismissed the cookie banner, so it is set on an opt-in basis. Nothing else is stored: we run no analytics, advertising or tracking storage that would call for consent.

3. How to clear

Browser-side: Site settings → Clear data on the portal origin. Clearing the data logs the patient out and resets the language preference.

4. Contact

support@projectlineil.com. You have the right to lodge a complaint with the ICO (ico.org.uk).