Cookie policy

Blitho sets exactly four cookies, and all four exist for one reason: keeping you signed in. There are no tracking, advertising, or analytics cookies on this site today. We count page visits on our public pages with Cloudflare Web Analytics, which sets no cookies and does not identify you.

The cookies we set

Every one of these is necessary, not optional: it is how the browser and our servers agree you are still signed in. Each is set by our server, unreadable by any script on the page, sent only over HTTPS, and never shared with anyone else.

access_token

Keeps you signed in while you use Blitho.

Expires in 15 minutes
refresh_token

Renews your session without asking for your password again.

Expires in 7 days
choice_token

Remembers which clinic you picked, partway through signing in.

Expires in 10 minutes
platform_session

Signs in Blitho's own support team to the admin console. Not used by clinics.

Expires in 4 hours

What we don’t do yet

Blitho runs no advertising or tracking scripts, and its only analytics is the cookieless Cloudflare counter on public pages. The cookie preferences panel on this site has categories for Functional, Analytics, and Marketing cookies because most sites eventually add them, and we want the choice to already exist when we do. Right now, turning them on or off changes nothing: nothing reads them.

If that changes, this page changes first, with the reason and the specific cookie named here.