Cookie Policy
Last updated: 24 June 2026 · Version 1.0
What this policy covers
This Cookie Policy explains how CareRoute uses cookies and similar technologies (such as local storage) on the CareRoute website and app. It sits alongside our Privacy Policy. Under the Privacy and Electronic Communications Regulations (PECR), we only use non-essential cookies and similar technologies with your consent.
The two categories we use
1. Strictly necessary (always on). These are required to run the Service and keep it secure — for example, to keep you logged in and remember your consent choice. They don't need your consent because the Service can't work without them.
2. Analytics & session replay (consent required). With your consent, we use PostHog to understand how the app is used, including session replays with all inputs and text masked. These are off until you accept via the consent banner, and you can change your mind at any time.
Cookies and storage we set
| Name / pattern | Type | Purpose | Category | Retention |
|---|---|---|---|---|
| sb-[…]-auth-token | Local storage | Keeps you signed in (Supabase auth) | Strictly necessary | Session / until logout |
| cr_analytics_consent | Local storage | Remembers your analytics consent choice | Strictly necessary | 12 months |
| ph_[…] | Cookie / local storage | PostHog analytics & session replay | Analytics (consent) | Up to 12 months |
| __stripe_[…] | Cookie | Fraud prevention during checkout (set by Stripe on payment pages) | Strictly necessary (payment) | Per Stripe |
Confirm the exact names above against your live build before publishing — replace any placeholder rows.
Managing your choices
When you first visit, our consent banner lets you Accept or Decline non-essential analytics and session replay. Essential features work either way. You can change your choice at any time by clearing site data in your browser, or by clearing your stored consent and reloading. Most browsers also let you block or delete cookies in their settings; doing so may affect how the Service works.
Changes
We may update this policy as our tools change. The “last updated” date above shows the current version.