Cookies and local storage

It covers the public website at www.calendify.ma (home, pricing, sign-up, sign-in, legal and verification pages). The clinic application (clinic.calendify.ma) and the Calendify mobile apps keep their own session and preferences; they are described in section 16 of the Privacy Policy.

NEXT_LOCALE (cookie)

• Purpose: remembers the language you picked with the language switcher (English or French) when it differs from the language your browser asks for, so the next page opens in your language.
• Set by: the website itself (first party). It is written when you open the site in a language other than the one your browser asks for, through the language switcher or a /fr link.
• Lifetime: a session cookie: it is deleted when you close your browser.
• Content: the language code (en, fr or ar). Nothing else.

calendify_session_id (local storage)

• Purpose: a random identifier that groups the usage events of your visits on this browser (page visited, button clicked) so we can count, for example, how many visitors reach the sign-up page. It does not identify you by name; it is our own measurement, not an advertising profile.
• Set by: the website itself, in your browser's local storage, on your first visit. It is never created on the document verification pages.
• Lifetime: until you clear the site's data in your browser.
• Content: a random string. It contains no name, e-mail, phone number or account identifier.
• Where the events go: to Calendify's own backend only, with the page path, the address of the page you came from, the event name and its details (for example which store button you clicked), and your browser's user-agent string. Our server adds a salted hash of your IP address, and the country it maps to when the hosting provides it, so repeated visits can be counted without storing the address.

• No advertising cookies and no advertising network.
• No third-party analytics script (no Google Analytics, no Tag Manager, no Plausible) and no social-network pixel. Our pages load no script from another company.
• No fingerprinting and no tracking across other websites.
• Fonts and images are served by the website itself, so no font or image provider sees your visit.

The sign-in page only checks your credentials: the website keeps no session of its own. If you are an active professional or staff member, the session is handed to the clinic application at clinic.calendify.ma in the address bar's fragment (the part after #), which browsers never send to servers. The clinic application then keeps your session in its own local storage on clinic.calendify.ma, as described in the Privacy Policy.

The pages that check a prescription or certificate from its QR code (addresses starting with /v/) store nothing in your browser and send no usage event. They are served with no-store, no-referrer and noindex headers, so the document's link is neither cached nor passed on.

• Clearing this site's data in your browser settings removes the cookie and the identifier. The website keeps working; the identifier is simply created again on your next visit, and the language cookie when you next pick a language.
• Blocking cookies for calendify.ma prevents the language cookie: pages then open in the language negotiated from your browser, and the /fr links keep working.
• Blocking local storage prevents the identifier: the website still works, and nothing is counted.

Questions about this page or about your data: privacy@calendify.ma.