Cookie policy
Version 2026-10-08.1 · last updated: 8 October 2026
1. What cookies are
Cookies are small files stored by the browser. Romanian Law 506/2004 requires information and, for cookies that are not strictly necessary, consent.
2. What we use
Public pages do not use advertising pixels. Google Analytics (G-FZJ7NBHEVN) is the same property as the previous website. It loads only after you press “Accept”.
| Name | Who | Purpose | Duration |
|---|---|---|---|
| dermaspot_locale | anyone who chooses a language | remembers Romanian or English; default remains Romanian | 1 year |
| refresh_token | staff only, after sign-in | HttpOnly session cookie, needed to stay signed in | 30 days |
| dermaspot_consent | anyone who chooses | stores “analytics” or “necessary only” | 6 months |
| _ga, _ga_FZJ7NBHEVN | visitors who accepted | Google Analytics visit statistics. No advertising profile. | up to 2 years |
The language, session and consent cookies are strictly necessary (Art. 4(5) of Law 506/2004). The session cookie is Secure and HttpOnly. The language cookie only stores ro or en. Analytics cookies are optional and are not set if you choose “Necessary only”.
3. Local storage
The staff app keeps the access token in page memory, not in a cookie. The doctors’ mobile app uses the phone’s secure store for the refresh token.
4. Control
Use “Cookie settings” in the footer to accept or refuse analytics. Refusing does not limit the site. You can also delete cookies in the browser. Deleting the session cookie signs staff out. Changing language with the RO | EN switch updates the language cookie. Withdrawing analytics consent deletes the Google cookies we can remove from this browser.
Questions: contact@dermaspot.ro.