Overview
Porvio does not set advertising cookies or include marketing pixels. It uses essential cookies for authentication and the public Ask Porvio question allowance, plus temporary browser storage for setup and the optional important-alert reminder. Cloudflare’s hosting, security, and built-in measurement services may provide aggregate request and performance information without creating a Porvio advertising profile.
Essential cookies
Porvio keeps an authenticated session in a Secure, HttpOnly cookie with SameSite=Lax. Browsers send this essential cookie to Porvio, but page scripts cannot read its value. The cookie may persist across tabs and browser restarts until it expires or you sign out.
When Ask Porvio opens on a public page, Porvio sets the__Host-porvio-luna Secure, HttpOnly, SameSite=Strict session cookie. It contains a signed random reference, not chat text or identity information. It has no persistent browser expiry, and Porvio rejects it after 24 hours. The related server record contains only an anonymous hash, count, and timing metadata.
You should still sign out after using a shared device and keep the browser and device protected.
Setup and preference storage
When an authorized team invitation is opened, Porvio temporarily stores the single-use invitation reference in local storage, with per-tab session storage as a fallback. This lets setup continue if email verification opens in another tab. Unlike the authentication cookie, this temporary reference can be read by Porvio’s page scripts. Porvio removes it after acceptance and automatically discards stored invitation data after 14 days where the browser permits. The server also enforces the invitation expiry and treats an accepted token as single-use.
If a referral link is opened, Porvio temporarily keeps its short referral code in per-tab session storage so email verification and workspace setup can continue. The code is removed after successful setup and contains no patient information.
If you dismiss the important-alert setup reminder, Porvio stores only a local timestamp that hides the reminder for 30 days. It contains no account, message, task, patient, or clinical content.
Device permissions
Microphone access is a browser permission, not a cookie. Porvio asks for it only when an authorized user starts a recording. A browser may remember that permission according to its own settings.
Porvio asks for notification permission only after you choose to turn on important alerts. The browser then keeps a push subscription, and Porvio stores its endpoint and encryption keys so the browser or operating-system push service can deliver encrypted, generic alerts. Those alerts say only that a teammate sent a message or an assignment was received; their push payload contains no patient identifiers, names, message text, task text, or clinical record details. Porvio does not request camera or location access for the current workflow.
Hosting and technical logs
Cloudflare and network providers can process IP address, request time, browser or device characteristics, request destination, error, and security signals to deliver and protect the Service. These records are controlled by provider configuration and contract rather than a Porvio advertising cookie. Review the Privacy Notice for the provider list and international-processing disclosure.
Your choices
You can clear Porvio’s cookies and site data in your browser. Clearing the authentication cookie signs you out. Clearing local or session storage removes a pending invitation or referral reference and may interrupt setup; it also resets a dismissed alert reminder. Clearing Ask Porvio’s cookie ends that browser session. Blocking essential cookies prevents authentication and Ask Porvio’s question allowance from working; blocking local or session storage may prevent setup from continuing across tabs.
You can turn important alerts off from Porvio’s Inbox or from your browser or operating-system site settings. Signing out also attempts to unsubscribe that browser. Browser and push providers control how long permission and their technical delivery records remain.
Porvio does not use advertising or marketing storage, so there is no marketing-cookie preference panel. Porvio will update this Notice and provide any legally required choices before materially expanding tracking.
Questions and updates
Questions can be sent to [email protected]. This Notice will be updated if the storage technologies or their purposes change.