Cookie Policy
Policy version: 2026-09-08-v2
Cookies and similar storage
Browser storage maintains sign-in, protects forms and remembers choices. External requests can also disclose technical information without setting cookies. This policy covers both.
Essential storage
| Item | Purpose and duration |
|---|---|
| Laravel session | Connects this browser to server-side authentication and form state. The configured session lifetime is 120 minutes; activity can renew it. |
| XSRF-TOKEN | Protects form requests against cross-site request forgery. It follows the configured session lifetime and is readable by JavaScript for that purpose. |
| edonate_privacy_choices | Encrypted, HttpOnly first-party cookie recording your choices for 180 days. Expiry or a new policy version requires a new choice. |
| Remember-me credentials, if selected | Maintain sign-in according to authentication settings. Log out and clear site data if needed. |
| Interface preferences | Interface components may store a local theme choice until cleared. It is not used for advertising. |
Optional services
No analytics or advertising provider is currently enabled. Analytics consent is not offered until a provider has been reviewed and configured.
Map tiles load only after maps are allowed. OpenStreetMap receives the IP address, browser information and requested tile coordinates. The aggregate table works without map tiles.
Where enabled for authorized adult staff, AI is blocked until allowed. A conversation identifier is placed in sessionStorage after consent and normally cleared when the tab closes. Messages are stored on the server and forwarded to Gemini. Clearing the identifier does not erase those messages; use the chat delete control or contact the operator. The Privacy Policy explains provider processing.
Google/Firebase scripts load when Google sign-in is deliberately requested. They are authentication rather than analytics scripts. Google's account flow may use its own authentication storage under its policies.
Accept, reject or withdraw
Optional services are off by default. Accept, reject and selected-choice controls are equally available. Closing the banner is not consent. Reopen “Privacy choices” in the footer at any time. Withdrawal stops future optional requests and reloads the page to unload running third-party code. It cannot recall a request already sent or erase a provider's existing copy.
Clear cookies and storage using browser settings if desired; this may sign you out and require a new choice. If JavaScript or storage is blocked, optional services remain off. Essential account processing has its own legal basis and is not bundled with optional consent.
Changes
The operator must update this inventory before adding another tracker, embed or storage purpose. Privacy rights and contact details are provided below and in the Privacy Policy.
Operator and privacy contact
Responsible organization: City Health Office of Lipa City.
Postal address: City Hall Compound, Lipa City, Batangas, Philippines.
Privacy representative: John Merrick F. Fortis (Privacy representative).
Service territory: Philippines only.
Minimum age for account creation and blood donation: 18 years old. Accounts for minors are not offered.
Privacy, rights requests, complaints and accessibility assistance: fortismerrick@gmail.com.