ORALZY uses cookies and similar local-storage technologies — local storage, session storage, IndexedDB and service-worker caches — to operate oralzy.com and the ORALZY application ("Service"). This Policy explains what they are, why we use them, and how you can control them.
A cookie is a small text file that a website places on your device. "Similar technologies" cover other client-side storage that achieves comparable purposes — such as localStorage, sessionStorage, IndexedDB, and the cache used by Progressive Web Apps and Service Workers. For brevity, this Policy refers to all of them collectively as "cookies".
Required for the Service to function. They cannot be switched off in our systems. They are usually set in response to actions you take such as logging in, filling forms, or setting your privacy preferences. Without them parts of the Service will not work.
Help the Service remember choices you make — preferred language, dashboard layout, theme, last-used filters — to provide a more personalised experience.
Help us understand how the Service is used in aggregate, so we can improve it. They count visits, measure performance, and identify error hotspots. Where used, they are configured to anonymise IP addresses and to respect Do Not Track. Examples include first-party performance metrics and, only when configured by the Customer, third-party analytics tools.
ORALZY does not currently use third-party advertising or retargeting cookies on the marketing site or inside the Service. If this changes, we will update this Policy and the consent banner.
| Name (or pattern) | Purpose | Category | Lifetime |
|---|---|---|---|
oralzy.session | Authenticated session | Strictly necessary | Session / up to 30 days "remember me" |
oralzy.tenant | Active tenant / clinic scoping | Strictly necessary | Session |
oralzy.csrf | Cross-site request forgery protection | Strictly necessary | Session |
oralzy.theme | Solar / dark / light theme preference | Functional | 1 year |
oralzy.locale | Language preference | Functional | 1 year |
oralzy.lastView.* | Last-used filters and dashboard layout | Functional | 1 year |
__cf_bm, cf_clearance | Cloudflare bot management and security | Strictly necessary | Up to 30 days |
Exact names may change as the Service evolves; this list is indicative, not exhaustive.
Some pages and features include components that may set third-party cookies — for example payment-gateway iframes (Razorpay), embedded support widgets, or third-party fonts. The relevant providers control these cookies and their privacy policies apply.
ORALZY honours the Global Privacy Control (GPC) signal where it is sent by your browser, and treats it as a withdrawal of consent for non-essential cookies and analytics. The legacy DNT header is not a settled standard but is also respected on a best-effort basis.
The Service is intended for use by adults — clinic staff and clinic-authorised users. ORALZY does not target advertising or analytics at children. Patient data, including data of minors, may be entered by clinics under their own consent flows; that data is governed by the Privacy Policy and DPA, not this Cookie Policy.
This Policy may be updated as the Service or applicable law evolves. Material changes are notified via email to admins or a banner on the marketing site. The current version is always at oralzy.com/cookie.html.
Questions: [email protected]. For grievances see our Grievance Redressal Policy.