Cookie Policy

What Are Cookies

Cookies are small text files placed on your device when you visit a website or use a web application. They allow the service to remember information about your visit — such as your preferred settings or login session — and help us improve your experience.

Cookies can be:

• Session cookies — temporary files deleted when you close your browser.
• Persistent cookies — files that remain on your device for a set period or until you delete them.
• First-party cookies — set by os.smedtec.co.uk directly.
• Third-party cookies — set by external services we integrate with (see Section 4).

This policy covers the SMEDTEC OS platform at os.smedtec.co.uk and the public marketing site at the same domain.

How We Use Cookies

SMEDTEC OS uses cookies for the following purposes:

• Authentication — to keep you securely signed in to your account and maintain your session across page loads.
• Security — to detect and prevent fraudulent requests and cross-site request forgery (CSRF).
• Preferences — to remember settings such as your selected interface preferences.
• Error tracking — to capture and report application errors so we can fix them (via Sentry).
• Payment processing — to support secure payment flows when you subscribe to a paid plan (via Stripe).
• Audience measurement — to understand how many people visit our public marketing and legal pages, which pages they read, and where they arrived from (via Google Analytics). These cookies are optional and set only with your consent.

We do not use cookies for advertising, remarketing, or tracking your activity across other websites.

Types of Cookies We Use

The table below describes the specific cookies set on os.smedtec.co.uk.

Third-Party Cookies

Certain features of SMEDTEC OS are provided by third-party services that may set their own cookies. We only use third-party services that are necessary for the platform to function.

Authentication Provider

Our managed authentication provider sets session cookies (the sb-access-token and sb-refresh-token entries in the table above) that are essential for keeping you signed in to your account. These cookies are strictly necessary and cannot be disabled without preventing login. The named legal entity behind our authentication and database infrastructure is disclosed to customers under our Data Processing Agreement and to prospective customers under NDA on request.

Stripe

We use Stripe for subscription billing and payment processing. Stripe sets cookies for fraud prevention and to maintain state during checkout. These cookies are required to process payments securely.

Stripe Privacy Policy: stripe.com/gb/privacy

Sentry

We use Sentry for application error monitoring. Sentry may set a session cookie to correlate error events from the same browser session, which helps us diagnose and fix bugs. No personal information is included in error payloads beyond what is necessary to reproduce the error.

Sentry Privacy Policy: sentry.io/privacy

Google Analytics

We use Google Analytics 4 to measure traffic to our public marketing and legal pages. Unlike the cookies above, these are not strictly necessary, so we ask for your permission before setting them.

The scope of this measurement is deliberately narrow:

• It runs only on our public pages — the landing page, /demo, /login, /signup, and our legal pages. It does not run anywhere inside the authenticated platform, so no signed-in activity, customer record, product, or submission is ever measured.
• Until you accept, Google Analytics runs in a consent-denied mode: it stores nothing on your device and receives no identifiers, only an anonymous, aggregate signal that a page was viewed.
• Google Analytics 4 does not log or store full IP addresses. We have not enabled Google Signals, advertising features, or remarketing on our property.
• We record only page views and a small set of content-free interaction events on the public product demo (for example, which demo chapter was opened). No text you type is ever transmitted.

You can change your mind at any time — see Section 5. You can also install Google’s official browser opt-out add-on, which blocks Google Analytics across every site you visit.

Google Analytics Privacy Policy: policies.google.com/privacy

Managing Cookies

You can control and delete cookies through your browser settings. The links below provide guidance for common browsers:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Withdrawing your analytics consent

When you first visit one of our public pages, we ask whether you accept analytics cookies. Declining is a single click, given the same prominence as accepting, and we do not ask again on later pages in the same visit.

To change a decision you have already made, clear the site data for os.smedtec.co.uk in your browser settings. We will ask you again on your next visit. Withdrawing consent is as easy as giving it, and has no effect on your access to the platform or on any feature you pay for.

Please note: blocking or deleting essential cookies (particularly the authentication session cookies) will prevent you from logging in to SMEDTEC OS. Functional and analytics cookies can be disabled without affecting access.

As SMEDTEC OS does not use advertising cookies, opting out of advertising networks (e.g. via the Your Online Choices tool) will have no effect on your experience of our platform.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use or changes in applicable law. We will update the "Last Reviewed" date at the top of this page and, where changes are material, notify you via email or an in-platform banner.

Your continued use of SMEDTEC OS after any update constitutes your acceptance of the revised Cookie Policy.

Contact Us

If you have questions about this Cookie Policy or our use of cookies, please contact us:

• Email: [email protected]
• Website: os.smedtec.co.uk
• Company: SMEDTEC Ltd, United Kingdom