Cookie Policy
Last updated: June 22, 2026
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the site remember your preferences, keep you logged in, and understand how the platform is used. Some cookies are strictly necessary for the Platform to work; others are optional and only active with your consent.
For information on how we handle your personal data more broadly, see our Privacy Policy.
How We Use Cookies
Medlobby uses four categories of cookies:
- Essential — Required for the Platform to function. Cannot be disabled.
- Analytics — Help us understand how users interact with the Platform. Only active if you consent.
- Consent — Store your cookie preferences in your browser.
- Payment — Set by payment processors during checkout only.
Essential Cookies
These cookies are strictly necessary for the Platform to operate and cannot be disabled via the cookie banner.
| Cookie Name | Purpose | Duration |
|---|---|---|
ml_rt | Secure single sign-on refresh token. Keeps you logged in across medlobby.com subdomains. HTTP-only, Secure flag, SameSite=None. | 30 days (rolling) |
ml_theme | Stores your selected visual theme (e.g. clinic_mint). | 1 year |
ml_dark | Stores your light/dark mode preference. | 1 year |
token (localStorage) | Your session JWT for authenticated API requests. Not a cookie — stored in browser localStorage. | 7 days |
Consent Storage
| Name | Purpose | Duration |
|---|---|---|
medlobby_cookie_consent (localStorage) | Stores your cookie consent choices (essential, analytics, marketing flags + timestamp). Not a cookie — stored in browser localStorage. | 1 year |
Analytics Cookies
These cookies are only set after you accept analytics cookies via the cookie banner. They help us understand how the Platform is used so we can improve it.
We use Google Analytics 4 with Consent Mode v2. No analytics data is sent before you grant consent. If you deny consent, Google Analytics still loads (so Consent Mode can function correctly) but operates in a restricted mode that does not collect or send personal data.
| Cookie Name | Purpose | Duration |
|---|---|---|
_ga | Google Analytics. Assigns a randomly generated ID to distinguish unique visitors. | 2 years |
_ga_XXXXXXXXXX | Google Analytics 4 session identifier. | 2 years |
_gid | Google Analytics. Shorter-lived visitor identifier. | 24 hours |
Data is sent to Google LLC (USA) under Standard Contractual Clauses. Google does not receive your name, email, or any directly identifying information.
Payment Cookies
These cookies are set by our payment processors only when you initiate a checkout or payment flow. They are not present during normal browsing.
Stripe
| Cookie Name | Purpose | Duration |
|---|---|---|
__stripe_mid | Fraud prevention. Helps Stripe identify devices used for transactions. | 1 year |
__stripe_sid | Short-lived session cookie active during the payment flow. | 30 minutes |
See Stripe's Privacy Policy for full details.
PayPal
PayPal sets its own cookies within its payment iframe or redirect flow. These are governed by the PayPal Privacy Policy.
Third-Party Services
Cloudflare Turnstile
Our login and registration forms use Cloudflare Turnstile for bot protection. Turnstile does not set persistent tracking cookies. It processes minimal browser attributes (browser fingerprint signals) to determine if a request is human. See Cloudflare's Privacy Policy.
Managing Your Cookie Preferences
Medlobby Cookie Settings
You can review and change your preferences at any time by clicking the cookie icon in the bottom-left corner of any Medlobby page. A preferences modal lets you accept or reject analytics and marketing cookies independently.
What Happens If You Decline Optional Cookies
If you decline optional cookies:
- All core Platform features remain fully functional
- Your login and subscription are unaffected
- Google Analytics will operate in Consent Mode v2 (no personal data collected or sent)
- Your theme preferences continue to work (essential cookies are unaffected)
Browser-Level Controls
You can also manage cookies at the browser level. Note that disabling essential cookies at the browser level may prevent login and other core functionality.
Google Chrome: Settings → Privacy and security → Cookies and other site data
Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data
Safari: Preferences → Privacy → Manage Website Data
Microsoft Edge: Settings → Cookies and site permissions → Cookies and site data
Withdrawing Consent
You can withdraw analytics or marketing consent at any time by:
- Clicking the cookie icon (bottom-left corner) on any Medlobby page
- Toggling off the relevant categories
- Clicking Save Preferences
Withdrawal takes effect immediately. It does not affect the lawfulness of processing that occurred before you withdrew consent.
Contact
For questions about our use of cookies or to exercise data rights, contact us at privacy@medlobby.com.
See also our Privacy Policy for full information about how we handle your personal data.
Last Updated: June 22, 2026