AQORIO DENTAL · WEBSITE & PROTOTYPE
Cookie Policy
Dated 19 October 2026 · Prepared for review, not legally approved.
Cookies and similar storage
Cookies are small browser records sent with web requests. Local storage remains on your device across visits; session storage is normally limited to a tab session. The prototype uses essential authentication and requested preference storage, not app-installed advertising or audience measurement.
App calls to optional usage tracking and remote browser exception reporting have been disabled. No app analytics or marketing SDK was found in the audit. There is no accept/reject banner because there is no optional tracking being offered. Hosting-injected scripts and payment-provider storage still require a deployed audit before public launch; they are not assumed essential simply because a provider supplies them.
If optional analytics or marketing is introduced later, it must remain off until you choose, with equally available Accept, Reject and Manage choices and a persistent way to reopen and withdraw. Authentication will not depend on agreeing to marketing.
Current browser storage inventory
sb-<service-reference>-auth-token
Authentication session, refresh token and account identity; essential for sign-in.
Local storage; persists/refreshes until sign-out, invalidation or browser clearing. The hosted session/token lifetime is unverified.
sb-<service-reference>-auth-token-code-verifier; …-flow-<flow-id>-code-verifier; …-flows-code-verifier
SDK-generated OAuth/PKCE continuation where used; essential to finish sign-in. Patterns are shown without account or service identifiers.
Local storage; SDK removes used verifiers and cleans flow entries. Incomplete-flow/provider expiry depends on the SDK; no site-defined lifetime.
aqorio-auth-destination
Return an authorised reviewer to the review page after sign-in.
Session storage; removed after routing, otherwise lasts for the tab session.
aqorio.workspace
Requested setup and comfort choices: practice name, country/type, menu, avatar/voice, colour, theme, mood and accessibility; simulated setup flags.
Local storage; no automatic expiry, until reset or clearing.
aqorio.role
Requested demo role, not real account permissions.
Local storage; no automatic expiry, until cleared.
aqorio.connected-tools
Requested voice/email, calendar/time-zone and billing preferences; not credentials or provider authorisation.
Local storage; no automatic expiry, until cleared.
aqorio.fu-templates.v1
Follow-up templates saved by you; use fictional content only.
Local storage; no automatic expiry, until cleared.
aqorio.competitors.v1
Competitor Watch entries saved by you.
Local storage; until Reset or clearing; no automatic expiry.
aqorio.practice-story
Your chosen era and non-sensitive practice memory.
Local storage; no automatic expiry, until cleared.
The generic sidebar component contains a seven-day cookie named sidebar_state for open/closed state, but the current AppShell does not mount that component: this cookie is not set by the current site navigation. We do not list unused component code as an active cookie.
Qualifying embedded editor previews can share the sign-in session with the trusted Lovable editor through validated messages. Normal site sign-in uses browser storage. Preview/editor behaviour is distinct from the public website.
Controls
You can remove the six AQORIO demo preference records with the button below. It deliberately leaves authentication and sign-in continuation storage alone. Reload afterwards to refresh choices already held in page memory. To remove sign-in information, use Sign Out from My Practice or clear this site's storage in your browser.
Browser settings can block or clear storage; essential account functions may stop working. Clearing local storage does not delete server accounts, enquiries, provider records, downloaded files or emails. Contact us about those separately.
Third-party requests
Fonts are served locally. Hosting, public image delivery and authentication receive the requests needed to serve the page or sign you in. Stripe Embedded Checkout loads only after you start an authorised test checkout; its cookies/storage and provider retention require a test-browser audit before launch. Google or Lovable sign-in can open provider pages with their own notices.
External AI transcription and ElevenLabs speech are paused. We cannot infer provider cookies, exact hosted log lifetimes or international processing locations from source code, and do not promise that clearing this site's browser records erases information held elsewhere.
Contact
Privacy enquiries and requests: hello@aqorio.com. Please do not send patient records or identification documents unless a secure, necessary verification process has been agreed.