Cookie Notice
Effective date: August 2, 2026
This notice explains how Daloreum, doing business as sofidex, uses cookies and similar browser storage. Read it with the Privacy Policy.
1. The short version
sofidex uses first-party cookies for sign-in, preview access and saved privacy choices. Optional patient tracking starts only after permission for the specific purpose. No third-party analytics vendor receives this recorder's events. Third-party advertising scripts are disabled on patient pages. The prepared future Google AdSense integration remains off until account setup and review are complete.
2. Cookies
| Name | Purpose | Category | Contents | Expires |
|---|---|---|---|---|
sofidex_patient_session | Keeps you signed in on the patient site, separately from the clinical account. | Strictly necessary | A random session token, hashed on the server. | 30 days for members; cleared on sign-out. |
sofidex_session | Keeps you signed in between page loads. | Strictly necessary | A random token. The server stores only a SHA-256 hash of it, so a copy of our database cannot be replayed as a login. | 30 days for members; 12 hours for staff accounts. Cleared on sign-out. |
sofidex_preview | Unlocks the site during the pre-launch period instead of showing the coming-soon page. | Strictly necessary | A fixed access token. Holds no information about you. | 1 year, or until you visit the preview logout link. |
These cookies are HttpOnly (unreadable by JavaScript), Secure, and SameSite=Lax.
3. Browser storage
These are not cookies and are never transmitted as request headers, but they do persist on your device. The diagnostic keys below apply to the clinical site; the patient recorder does not create or use them.
| Key | Store | Purpose | Expires |
|---|---|---|---|
sofidex.theme | Local storage | Remembers whether you chose the light, dark, or automatic appearance. | Until you clear site data. |
sfx_anon | Local storage | A random identifier used to group diagnostic events from the same browser so a recurring fault can be counted once rather than many times. Not derived from anything about you and not used to build a profile. | Until you clear site data. |
sfx_session | Session storage | A random per-tab identifier that lets us see the sequence of events leading up to an error. | When you close the tab. |
4. What the diagnostic events contain
The two diagnostic identifiers above accompany a first-party error and performance log. It records page paths, navigation, JavaScript errors, failed network requests, page-load performance measurements, and the identity of an element you clicked — its tag, id, label, or first few words of visible text. It does not record what you type, and form values are never captured. If you are signed in, these events are associated with your account.
Diagnostic events are deleted after 30 days.
5. Your choices
Optional patient purposes can be rejected or withdrawn independently of sign-in at /patients/privacy. Your browser can also block or delete cookies and clear local storage; deleting session cookies signs you out.
Patient privacy controls honor Global Privacy Control and Do Not Track by disabling all optional recording for the browser profile.
6. Changes and contact
We will update this notice if the technologies change. Questions may be sent to [email protected], or:
Daloreum d/b/a sofidex
Patient privacy preferences
sofidex_privacy is a first-party HttpOnly, Secure (in production), SameSite=Lax preference cookie, lasting up to 180 days after being set. It is set when you save or reject optional purposes. The server stores a hash of its random token. Before a choice, no optional patient analytics identifier is created. The old sfx_anon and sfx_session diagnostic stores are not used by the patient recorder. Choices and expiry are checked on the server for each event batch. Visit Privacy choices & data to withdraw permission, export or delete optional records.
Advertising choices, when advertising is enabled, are saved in first-party browser storage for up to 30 days without a visitor identifier. You can turn Google ads off on reading pages. GPC or Do Not Track disables ads. Newsletter signup does not enable advertising or optional browsing analytics.