Cookie & local-storage policy
Last reviewed: July 2026
1. Summary
Stevyn uses strictly-necessary cookies and browser storage only. We do not use analytics cookies, advertising cookies, social-media trackers, or any third-party tracking pixels. No consent banner is therefore strictly required under PECR, but we display one for transparency.
2. What we store on your device
| Name | Type | Purpose | Retention |
|---|---|---|---|
| sb-*-auth-token | localStorage | Sign-in session (Lovable Cloud auth). Strictly necessary. | Until sign-out |
| stevyn.theme | localStorage | Remembers light/dark theme preference. | Until cleared |
| stevyn.font-size | localStorage | Remembers accessibility font-size preference. | Until cleared |
| stevyn.active-team | localStorage | Remembers the team/ward selected in the team switcher. | Until cleared |
| stevyn.cookie-ack | localStorage | Records that you have dismissed the cookie notice. | 12 months |
3. Third parties
None. Stevyn does not send your data to Google Analytics, Meta, LinkedIn, HotJar, or any similar service. Web fonts are loaded from fonts.gstatic.com (Google Fonts) and do not set cookies.
4. How to clear
Sign out from the avatar menu, then clear site data in your browser (Settings → Privacy → Clear browsing data → Cookies and site data).
5. Contact
Questions about cookies or data: Trust Data Protection Officer — dpo@ulh.nhs.uk.