Cookie notice

The cookies Care sets

These are set by Care itself, from the same domain you are reading this on:

• `care-session` — keeps you signed in across pages. Expires after two hours of inactivity.
• `XSRF-TOKEN` — proves a form submission came from a page Care served, which is what stops another site submitting forms as you.
• `remember_web_…` — set only if you tick "remember me" when signing in, so you stay signed in after closing the browser.

The session cookie is a reference, not a store: the session contents live in the platform's own database, and the cookie carries only the identifier that points at them.

What Care does not do

There are no analytics cookies, no advertising cookies, and no cross-site tracking. Care does not run an analytics product, and nothing on the site profiles you for marketing.

This is why there is no cookie consent banner: consent is required for cookies that are not strictly necessary, and Care does not set any.

Requests to other sites

The public home page loads two files from other providers — an icon font from Google Fonts, and the 3D viewer library from jsDelivr. Neither sets a cookie, but both receive your IP address and browser details simply because your browser asks them for a file.

This happens on the public home page only. Once you are signed in, nothing is loaded from outside the platform.

Turning them off

Any browser can block or delete cookies. Blocking these particular ones does not reduce tracking — there is none to reduce — it prevents signing in, because the platform will have no way to recognise you between one page and the next.