DocChat
Cookies

Cookie Policy

Last updated: May 1, 2026No third-party ad cookiesHonors Do-Not-TrackEvery cookie listed

DocChat uses cookies to keep you signed in, remember your preferences, and understand how the product is used in aggregate. This page lists every cookie we set, what it does, and how long it lives.

1. What is a cookie?

A cookie is a small text file a website stores in your browser. We use cookies (and similar technologies like localStorage) for the purposes described below.

2. Cookies we use

Strictly necessary

These are required for DocChat to function. You cannot opt out of them and continue using the service.

NamePurposeLifetime
next-auth.session-tokenAuthenticates your session30 days
next-auth.csrf-tokenPrevents cross-site request forgerySession
next-auth.callback-urlReturns you to the right page after sign-inSession

Functional

Remember your preferences so the product feels yours.

NamePurposeLifetime
themeLight / dark mode preference1 year
languageUI language preference1 year
countryCurrency and regional defaults1 year

Analytics

Anonymous usage analytics — never tied to your identity, never sold, never used for advertising.

NamePurposeLifetime
_dc_visitorDistinguishes new vs returning visitors (no PII)1 year

3. Third-party cookies

We do not use third-party advertising or social-tracking cookies. The only third-party cookies you may see come from CCAvenue during the brief moment you're on the payment page, and from Google during the OAuth sign-in flow.

4. How to manage cookies

You can block or delete cookies via your browser settings. Blocking the strictly-necessary cookies will sign you out and may break functionality. To opt out of the analytics cookie only, click Cookie settings in the footer (coming soon) or enable your browser's Do-Not-Track header — we honor it.

5. Updates

We'll update this page if our cookie use changes. Material changes will be notified by email to registered users.

Have a question about this policy?

A real human reads every email — typically within one business day. For data-protection requests, use the privacy inbox so we can prioritise.