Legal & Privacy
Cookie Policy
Effective Date: September 11, 2026
Last Updated: September 11, 2026
This Cookie Policy explains how Ephatha uses cookies and similar browser-storage technologies. Ephatha uses a limited set of technologies primarily for security, authentication, and essential functionality.
Ephatha does not use advertising cookies or third-party behavioral tracking as part of the core Service.
1. What Are Cookies?
Cookies are small pieces of information stored by a website in your browser. They can be used to maintain a secure session, remember a necessary setting, or support a particular website function.
2. Essential Cookies
Essential cookies are necessary for security and core functionality. They may include:
- Administrator session cookies used to maintain secure authenticated administration sessions;
- Google OAuth state cookies used for short-lived OAuth security and request validation; and
- Passkey/WebAuthn challenge cookies used for short-lived authentication challenges and replay protection.
These technologies support security controls such as authentication, authorization, cross-site request protection, and prevention of replay or unauthorized access.
2.1 Security Attributes
Authentication-related cookies are configured with security attributes such as Secure, HttpOnly, SameSite, and host-only restrictions where appropriate. Some cookies are short-lived and expire automatically after the relevant operation or session.
3. No Advertising or Behavioral Tracking Cookies
Ephatha does not intentionally use cookies for:
- targeted advertising;
- cross-site behavioral profiling;
- advertising measurement; or
- selling or sharing browsing behavior for marketing purposes.
If this changes in the future, this policy will be updated and any consent required by applicable law will be requested before non-essential cookies are used.
4. Third-Party Services
Third-party services used by Ephatha, such as Google services, may use their own cookies or similar technologies when you interact directly with those services. Those technologies are governed by the applicable third party's own policies and settings rather than this Cookie Policy.
5. Managing Cookies
Most modern browsers allow you to view, block, or delete cookies through their privacy settings. You can consult your browser's documentation for instructions.
Blocking essential cookies may prevent login, appointment-management, or other security-sensitive functions from working correctly.
6. Relationship to the Privacy Policy
This Cookie Policy should be read together with the Ephatha Privacy Policy, which explains how personal information is collected, used, stored, shared, retained, and deleted.
7. Changes to This Cookie Policy
We may update this Cookie Policy when the Service, technology, or applicable legal requirements change. The updated version will be published on this page with a revised effective date.
8. Contact
Questions about cookies, browser technologies, or privacy should be sent to:
Grace Valookkaran Paul (Grace V Paul)
RCI CRR No. A92329
gracepaulaslp@gmail.com