Cookie and Storage Notice

Current cookie audit

The current OncoRadar application code sets the two first-party cookies below for the described web functions. The repository contains no advertising, cross-site tracking or analytics integration.

• __Host-oncoradar_session — essential authentication cookie; secure, HttpOnly, SameSite=Lax, host-only, Path=/, and limited to the authenticated session lifetime.
• oncoradar-locale — functional language preference; secure, SameSite=Lax, host-only, Path=/, available to browser code, and retained for up to one year.

Why no consent banner is shown

Because the present implementation uses only an essential session mechanism and a user-requested functional language preference, and does not use advertising, tracking or analytics, OncoRadar does not present a cookie-consent banner. This is not a claim that every jurisdiction treats storage identically. If non-essential technology is introduced, this notice and any required choices will be updated before activation.

Related local and server storage

Your browser may hold ordinary cache and transient interface state. Account, workspace, acceptance, quota and audit data are stored server-side as described in the Privacy Policy. API clients control their own secure storage of the one-time credential secret.

Controls and effects

You may clear browser cookies. Removing the session cookie signs you out locally; removing the locale cookie resets automatic language preference but does not delete account data. Browser blocking can prevent authentication or preference persistence. Contact the privacy address if you observe a storage technology not listed here.