Cookie Policy
Last updated: 6 October 2026
Scrivora sets no advertising, analytics or tracking cookies. What it stores in your browser is there only to keep you signed in and to keep patient information safe. Because none of it is optional, there is no cookie banner to accept.
What we store in your browser
These are the only items the app writes to your browser. They are read by the app on this device and are not sent to anyone else, except the session identifier, which is sent to Scrivora so a lost device can be signed out.
| Name | Purpose | Kept for |
|---|---|---|
| firebaseLocalStorageDb (IndexedDB) | Keeps you signed in between visits. Set by Firebase Authentication. | Until you sign out, or the app signs you out for inactivity |
| healthcare_last_auth | Remembers whether you last signed in with Google or email, to highlight that option. | Until you clear browser data |
| scrivora.session | An identifier for this browser’s sign-in, so the Scrivora platform team can see and end a session if a device is lost. | Until you sign out |
| scrivora.sessionBeat | Which open tab reports the session, so only one tab checks in per minute. | While the app is open |
| scrivora.lastActivity | When you last used the app in any tab, to sign you out after 10 minutes of inactivity (30 while a report has unsaved edits). | While the app is open |
| scrivora.idleSignedOutAt | Why you were signed out, so the other open tabs can show the same message. | 30 seconds |
| scrivora.unsavedWorkAt | That a report has unsaved edits, so the inactivity sign-out waits for it. | 3 minutes after the last edit |
| scrivora.recordingAt | That a consultation recording is in progress, so no sign-out can interrupt it. | 3 minutes after recording stops |
| scrivora.remoteEndPending | That the platform team has ended your session and the app is waiting for you to save. | Until saved or signed out |
| chunk_load_failed (sessionStorage) | Stops the page reloading in a loop after a software update. | Until the tab is closed |
| last_auto_refresh (sessionStorage) | Stops the page reloading in a loop after an error. | Until the tab is closed |
All of these are strictly necessary for the service you asked for: signing in, staying signed in safely, and not losing a recording or report. They need no consent under the UK Privacy and Electronic Communications Regulations (PECR) or the EU ePrivacy Directive.
Third-party requests
The public website loads nothing from a third party. Its typefaces, Inter and Outfit, are served from scrivora.co itself, so visiting the site sends no request to Google or anyone else.
Inside the app, the only third party your browser talks to is Google, for sign-in (Firebase Authentication, including the Google sign-in window if you use it). Subscription payments are processed by Stripe on Scrivora’s server; your browser does not talk to Stripe.
Your choices
You can clear everything above through your browser’s settings (Clear browsing data, or Site settings for scrivora.co). Doing so signs you out. Blocking site storage altogether stops sign-in from working.
If we ever add analytics or marketing tools, this page will say so and a consent choice will appear before any such tool loads.
Questions
Write to support@scrivora.co. For how we use personal data more generally, see the Privacy Policy.