Cookie policy

A cookie is a small file saved by your browser and attached to matching requests. Menolia uses cookies and local storage technologies to run the service, especially to secure sign-in and remember certain preferences.

Optional Google Analytics 4 audience measurement loads only after permission on public production pages of menolia.ch, never in accounts, sign-in or subscription flows. Advertising and ad personalisation are disabled. Menolia sends neutral page groups, language, click intentions and only preapproved campaigns, not account or health data, forms or raw URLs. Google still processes your IP address and pseudonymous technical identifiers: this is not anonymous. Processing outside Switzerland is possible; countries, safeguards and retention at Google remain to be confirmed. Google Fonts remains separate.

Technologies strictly necessary for communication or the service you request may be used without prior consent, subject to applicable law. This does not automatically extend to optional technologies.

The following cookies were identified in the service. Some are used during sign-in, including before authentication; billing preferences may be stored when subscription offers are displayed.

The session name “menolia-session” and 120-minute duration were observed on Carole; the name and duration actually issued in production still need confirmation. Production session-attribute configuration is described below. Language and billing periods follow their writing mechanisms; a new write may renew expiry.

Production server-session configuration uses Secure, HttpOnly and SameSite=Lax. Protection and billing-preference mechanisms use Secure and SameSite=Lax; billing also uses HttpOnly, while the protection token is accessible to the interface. The language cookie uses SameSite=Lax without Secure added by its mechanism. These attributes do not prove encryption of all stored data or erasure of local copies.

If you choose Google sign-in or a Stripe payment, those providers’ pages may use their own cookies under their policies. Their names and lifetimes are not confirmed by this inventory. The site also loads Google Fonts, transmitting technical connection information; this does not establish the presence of an advertising cookie. See the privacy policy for these exchanges. Privacy Policy.

Cookies accompany certain requests to the service. Local and session storage save information in your browser without automatically attaching it to every request; service features may nevertheless use some of it when communicating with the server.

Display preferences

Language is saved in the cookie described above. Some interface settings, such as the open symptom category, are remembered during the tab session. Symptom identifiers and symptom intensities are also kept temporarily to undo a reset or copy the previous day: these are tracking data, not just display preferences.

Menolia stores your Statistics permission or refusal in local storage menolia.analytics-consent.v1 for 180 days, with decision and expiry dates. Without a valid choice, statistics remain disabled. The old menolia.cookie-consent key never authorizes statistics. The GA4 cookie names in the table are configured in code, not observed deposits in production.

Service operation

Temporary information helps resume email sign-in and prevents the same action being processed repeatedly. It may include an email address and a sign-in request identifier, but not the one-time code you enter. This information may be used in exchanges with the service.

Reminders and notifications

For reminders you enable, your browser may remember those already shown and snoozes you requested to avoid repetition. Snoozes contain technical identifiers and times; your browser’s notification service may also be involved when you allow notifications.

Session storage is tied to the tab, depending on how your browser works. Local storage may persist until cleared; some entries are removed after use, but there is no single retention period or automatic expiry for all information, even where a key includes a date.

You can manage or delete cookies and local data in your browser. Deletion may sign you out or reset preferences; blocking necessary cookies may prevent secure actions. Account deletion does not remotely clean every browser, device or downloaded file. On a shared device, also check local data. Storage specific to the mobile application is described in the privacy policy.

Accepting or refusing measurement is optional and does not affect the service. Closing the panel is not acceptance. The versioned analytics choice is stored locally for 180 days; old information acknowledgements do not grant analytics permission. The button below and footer cookie preferences reopen the panel for withdrawal. Withdrawal stops measurement, deletes only its dedicated cookies and reloads only after denial has been saved and verified. Otherwise measurement stays off in this document, an error is shown and there is no automatic reload; an old permission may remain for a later opening. Withdrawal cannot recall requests already sent. Notification permissions and reminders remain separate.

The optional settings are independent, including statistics refused and registration tracking allowed. Switches prepare a draft; Save my choices applies the displayed values. Refuse all turns both off immediately. Closing discards the draft without renewing expiry dates. Storage failures stay visible; unconfirmed server withdrawal stays pending and can be retried with the same buttons. Registration, completed or skipped personalization, and payment remain available without optional cookies.

Registration and subscription tracking

With your separate permission, Menolia receives a random visit identifier, the consent date and neutral source, campaign and platform categories. Missing sources and undetermined devices stay unknown. Public observations concern visits and registration starts. On the server, the origin can be linked to an account pseudonym and milestones for account creation, email verification, personalization decisions (completed or skipped), observed payment, renewal, cancellation or expiry according to available evidence. No personal answer content, symptoms or clinical signals are used in this tracking. These milestones are not sent to Google Analytics.

Menolia and its hosting provider Infomaniak process this tracking; aggregate views are restricted to authorized operators. It is not linked to another product. An account-linked pseudonym is not anonymous data. Google receives only the public statistics data described above if you separately allow Google Analytics. Google sign-in, fonts and payment providers remain separate flows.

The attribution choice and identifier are stored in menolia.acquisition-consent.v2 for 90 days. Server attribution validity is bounded by that consent and a configured retention of 1 to 90 days; events have a configured retention of 1 to 90 days. Physical deletion depends on purge maintenance when enabled, not expiry alone. Consent, withdrawal and deduplication receipts are kept separately without automatic purging in this mechanism. Confirmed withdrawal deletes server attribution, not all business history or data already received by Google. The minimal withdrawal command is kept until server confirmation. These periods differ from the 180 days for remembering the GA4 choice, the 90 days configured for its cookies and Google’s unverified provider retention.

This policy may be updated to reflect changes in the service, technologies used or legal obligations.

The last revision date appears at the top of this page.

For questions about cookies or storage technologies used by Menolia, email contact@menolia.ch or use our contact form.