Cookie Policy
This policy explains what cookies and similar storage technologies Medalty uses, why, and how you can control them. Compliant with GDPR (Regulation (EU) 2016/679), the ePrivacy Directive 2002/58/EC, and Greek Law 3471/2006.
1. What cookies are
Cookies are small text files stored on your device by a website. We also classify under "cookie" any equivalent technology: localStorage, sessionStorage, IndexedDB, Service Worker.
2. Essential-only policy
Medalty uses essential cookies only. We don't use advertising cookies, run third-party analytics (Google Analytics, Meta Pixel, etc.), or track your behavior on other sites.
3. Full cookie inventory
| Name | Purpose | Type | Lifetime | Provider |
|---|---|---|---|---|
sb-access-token | Stores your sign-in token | Essential | 1 hour (rolling) | Supabase Auth |
sb-refresh-token | Auto-refreshes the session | Essential | 30 days | Supabase Auth |
NEXT_LOCALE | Remembers your language (en/el) | Functional | 1 year | Medalty |
medalty-cookie-consent | Stores your cookie banner choice | Essential | 1 year | Medalty |
Because we use onlyessential/functional cookies, prior consent is not required per EDPB Opinion 5/2020 and Greek law — but we show a banner for transparency and to record that you've been informed.
4. Third-party cookies
No third-party service places cookies on your device through Medalty. We do not use:
- Google Analytics, Google Tag Manager, GA4
- Meta (Facebook) Pixel, Instagram tracking
- TikTok Pixel, LinkedIn Insight, Twitter Pixel
- Hotjar, Mixpanel, Amplitude, Segment
- Advertising networks of any kind
5. How to control or delete cookies
You can delete or block all cookies from your browser settings:
Note: if you block all cookies, you will not be able to sign in to Medalty.
6. Withdrawing consent
Since we have no optional cookies, accepting the banner only confirms that you've been informed. You can delete the medalty-cookie-consent cookie from your browser at any time to see the banner again.
7. If we add analytics or functional cookies in the future
We'll display a new banner with separate accept/reject toggles per category, in accordance with Article 7 GDPR. Consent will be opt-in, presented equally ("Decline" equally prominent as "Accept"), and revocable.