Cookies
Cookies are small text files a website stores in your browser. We also use similar technologies, such as browser local storage. In this policy, “cookies” covers both.
Your choices
When you first visit MedShr we ask whether you agree to analytics and marketing cookies. Necessary cookies are always on, because MedShr can’t work without them. Nothing else is set until you choose.
You can change your mind at any time with Cookie settings at the foot of any page. If you withdraw consent, we delete the analytics or marketing cookies set on our domain and reload the page. Your choice is remembered for 12 months, after which we ask again.
In the MedShr iPhone and Android apps’ built-in browser, we only use necessary cookies.
Necessary cookies
These keep you signed in, keep MedShr secure and remember your choices. They don’t need your consent.
| Cookie | Purpose | Lasts |
|---|---|---|
MSESSID | Keeps you signed in while you browse | Until you close your browser |
refresh_token | Keeps you signed in between visits | 12 months |
authed | Tells MedShr’s pages that you’re signed in | Until you close your browser |
csrf_token | Protects forms against forgery | Until you close your browser |
ms_consent | Remembers your cookie choice | 12 months |
mstz | Your time zone, so dates and times show correctly | 12 months |
client_type | Whether you’re using the website or a MedShr app’s built-in browser | 12 months |
app_banner_dismissed | Remembers that you closed the “Open in the app” banner | 30 days |
bp | Remembers that you’ve confirmed you’re a healthcare professional on restricted pages | Until you close your browser |
eaid | Completes a MedShr link you followed (for example, an invitation to join a group) after you sign in | Until you close your browser |
When you sign in with Google, Apple, Facebook or LinkedIn, that service may set its own cookies. See its privacy policy.
Branch (branch.io) creates the links you use to share and invite, and opens the right page when you follow one. Without your marketing consent it runs in a restricted mode: it doesn’t track you, and stores only a small flag in your browser.
Google reCAPTCHA protects sign-in and sign-up from automated abuse, and may set Google cookies.
Measurement we do ourselves
We measure how MedShr is used with our own first-party analytics. It doesn’t use tracking cookies and isn’t shared with advertisers.
If you arrive from one of our campaigns, the tt cookie remembers the campaign name until you close your browser, so we can tell which campaigns bring new members. It only stores the advertising click identifiers that Google, Meta and LinkedIn add to links if you’ve allowed marketing cookies.
Analytics cookies (with your consent)
| Provider | Cookies | Purpose | Lasts |
|---|---|---|---|
| Google Analytics | _ga, _ga_* | Counts visits and shows how MedShr is used, so we can improve it | Up to 2 years |
Marketing cookies (with your consent)
These measure how well our advertising works and how people find MedShr.
| Provider | Cookies | Purpose | Lasts |
|---|---|---|---|
| Google Ads | _gcl_* | Measures sign-ups that come from our Google ads | 90 days |
| Meta (Facebook, Instagram) | _fbp, _fbc | Measures sign-ups that come from our Meta ads | 90 days |
li_fat_id, plus cookies on linkedin.com | Measures sign-ups that come from our LinkedIn ads | Up to 30 days on our domain | |
| Branch | Branch storage | Shows which links and campaigns bring people to MedShr | Until you clear your browser storage |
| MedShr | tt (click identifiers) | Remembers the ad you clicked, so we can measure it when you sign up | Until you close your browser |
Measuring sign-ups from our servers. If you’ve allowed marketing cookies, then when you confirm your email address or are verified as a healthcare professional, we tell Meta and LinkedIn so they can measure our ads. We send a scrambled (hashed) form of your email address and, if you arrived from one of their ads, the click identifier. If you haven’t allowed marketing cookies, we send nothing. If you change your choice, it applies from the next time you sign in or return to MedShr.
Some of these providers process data in the United States. See our privacy policy for how that data is protected.
Social sharing
If you share content to a social network, that network may set its own cookies.
Browser settings
You can also block or delete cookies in your browser settings. Blocking necessary cookies will stop you signing in.