Cookie Policy
How we use cookies and similar tracking technologies
Last updated: 23 March 2026
Summary: We use essential cookies to keep the platform working, analytics cookies (Google Analytics 4) on our marketing website to understand traffic, and functional cookies to remember your preferences. You can opt out of non-essential cookies at any time.
1. What Are Cookies?
Cookies are small text files placed on your device when you visit a website or use a web application. They allow the site to recognise your device on subsequent visits and store information about your preferences or actions.
We also use similar technologies such as local storage and session storage, which work in a comparable way to cookies but store data directly in your browser rather than as a file. References to "cookies" in this policy include these technologies unless stated otherwise.
2. Who Sets Cookies?
Cookies are set either by MedFunnel directly (first-party cookies) or by third-party services we integrate with (third-party cookies). First-party cookies are controlled by MedFunnel. Third-party cookies are governed by the privacy and cookie policies of the respective third parties.
3. Types of Cookies We Use
3.1 Essential Cookies
These cookies are strictly necessary for the platform and website to function. They cannot be disabled without breaking core functionality such as authentication, session management, and security. No consent is required for essential cookies under applicable law.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
sb-* (Supabase) | Authentication session token — keeps you logged in to the app. | Session / 1 week | First-party |
__stripe_mid | Fraud prevention and payment security, set by Stripe during checkout. | 1 year | Third-party (Stripe) |
__stripe_sid | Session-level fraud prevention, set by Stripe during checkout. | 30 minutes | Third-party (Stripe) |
csrf_token | Protects form submissions against cross-site request forgery attacks. | Session | First-party |
3.2 Analytics Cookies
We use analytics cookies on our marketing website (www.medfunnel.io) to understand how visitors interact with our content — which pages are visited, how long users stay, and where traffic originates. This helps us improve the website and our marketing. Analytics cookies are not used within the authenticated application.
These cookies require your consent where required by applicable law (e.g., in the EEA and UK). You may opt out at any time — see Section 6.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
_ga | Google Analytics 4 — distinguishes unique users by assigning a randomly generated client ID. | 2 years | Third-party (Google) |
_ga_<container-id> | Google Analytics 4 — persists session state for a specific GA4 measurement ID. | 2 years | Third-party (Google) |
_gid | Google Analytics 4 — distinguishes users, expires after 24 hours. | 24 hours | Third-party (Google) |
_gat | Google Analytics — used to throttle request rate. | 1 minute | Third-party (Google) |
Google Analytics data is processed in accordance with Google's Privacy Policy. We have enabled IP anonymisation so that the last octet of your IP address is masked before any data is stored. We do not share GA4 data with any other parties.
3.3 Functional Cookies
Functional cookies remember choices you make to provide a more personalised experience. They are not strictly necessary but enhance usability.
| Cookie Name | Purpose | Duration | Type |
|---|---|---|---|
mf_theme | Stores your UI theme preference (light/dark mode) in the application. | 1 year | First-party |
mf_locale | Stores your language or locale preference. | 1 year | First-party |
mf_sidebar | Remembers whether the sidebar is expanded or collapsed. | Session | First-party |
3.4 Marketing Cookies
We do not currently use advertising or retargeting cookies on our website. If this changes, we will update this policy and request your consent before setting any such cookies.
4. Third-Party Services and Their Cookies
Some third-party services embedded in our website or platform may set their own cookies. We do not control these cookies and they are subject to the relevant third party's cookie and privacy policy:
- Google LLC (Google Analytics 4) — analytics cookies on the marketing website. See Google's cookie policy.
- Stripe, Inc. — payment security cookies set during checkout flows. See Stripe's privacy policy.
5. Cookies and Consent
Under the ePrivacy Directive and GDPR (where applicable), we are required to obtain your consent before setting non-essential cookies on our marketing website. We use a cookie consent banner on first visit to collect this consent. Essential cookies are set without consent as they are strictly necessary for the service to function.
Within the authenticated application (app.medfunnel.io), by accepting our Terms of Service, you acknowledge the use of essential and functional cookies necessary to operate the platform.
6. How to Manage and Opt Out of Cookies
6.1 Cookie Consent Banner
When you first visit our marketing website, you will be presented with a cookie consent banner allowing you to accept or decline non-essential cookies. You can change your preferences at any time by clicking the "Cookie Settings" link in the website footer.
6.2 Browser Settings
Most browsers allow you to control cookies through their settings. You can:
- Block all cookies or only third-party cookies;
- Delete existing cookies from your device;
- Receive a notification each time a cookie is set.
Please note that disabling essential cookies will prevent the platform from functioning correctly. Guidance for common browsers:
- Chrome: Settings → Privacy and Security → Cookies and other site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
6.3 Opt Out of Google Analytics
You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on. Alternatively, disabling analytics cookies via our cookie consent banner will prevent GA4 from being loaded on our marketing website.
7. Data Retention for Cookie Data
Cookie lifespans are listed in the tables above. Analytics data collected via Google Analytics is retained in line with our data retention settings (typically 14 months for individual session data, after which it is aggregated or deleted). For further details, see our Privacy Policy.
8. Changes to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, new regulations, or updated third-party services. We will update the "Last updated" date at the top of this page. Where changes are material, we will notify you via a notice on our website or by email.
9. Contact Us
If you have any questions about our use of cookies or this policy, please contact us:
- Email: [email protected]
- General: [email protected]