Cookie policy

Current decision: Shifa uses only strictly necessary authentication cookies today. We do not show a consent banner because asking for consent to strictly necessary cookies would be misleading. A consent prompt must be enabled before any analytics, advertising or other non-essential cookie is introduced.

Cookies we use

Cookie	Purpose	Lifetime	Consent
Shifa.Profile	Keeps a signed-in user authenticated in local development.	Up to 8 hours, refreshed while the session is active.	Not required: strictly necessary
__Host-Shifa.Profile	Keeps a signed-in user authenticated in production.	Up to 8 hours, refreshed while the session is active.	Not required: strictly necessary

Non-essential cookies

There are no non-essential cookies in use. If Shifa adds analytics or similar tooling, the cookie inventory must be updated, consent wording must be published, and a consent prompt must be displayed before the cookie is set.