Cookie Policy
Last updated: October 2, 2026
What Cookies We Use
Ceribell uses a single essential cookie:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
hs_sid | Session authentication | 7 days | Essential |
How It Works
The session cookie is set when you log in and is required for the application to function. It is:
- HttpOnly — not accessible to JavaScript (prevents XSS theft)
- Secure — only sent over HTTPS (when configured)
- SameSite=Lax — prevents cross-site request forgery
- Encrypted — the session ID is sealed with post-quantum cryptography
Analytics
Ceribell does not set analytics or advertising cookies by default. If the administrator has configured a privacy-respecting analytics script (such as Plausible, Umami, or Matomo), it may load on public pages only — never on authenticated pages. Check with your administrator for details. The theme preference (light/dark) is stored in your browser's localStorage, not as a cookie.