The cookies and similar technologies NeedsDoctor uses, what each one does, and how to control them.
A cookie is a small text file a website stores in your browser. Cookies let a site remember things between page loads — for example, that you are signed in. Some are deleted when you close your browser ("session cookies"); others persist for a set period ("persistent cookies").
This policy forms part of our Privacy Policy.
These are required for the platform to work. Without them you could not sign in or submit a form securely, so they cannot be switched off through the site.
| Cookie | Purpose | Lifetime |
|---|---|---|
PHPSESSID |
The main session identifier. Keeps you signed in as you move between pages, and links your browser to server-side data such as your form tokens. | Session — deleted when you close your browser or sign out. |
hosp_sess |
Separate session identifier used by the hospital admin portal, so a hospital login is kept distinct from other portals. | Session. |
| Module session cookies | The ayurvedic, pharmaceutical and other portals each use their own named session cookie for the same purpose, so signing into one does not affect another. | Session. |
Session cookies are set with the HttpOnly flag (so page scripts cannot read them) and
SameSite=Lax (which limits their use in cross-site requests). Over HTTPS they are also
marked Secure. Signing out clears the session and expires the cookie.
We also store an anti-CSRF token in your session. It is not itself a cookie, but it depends on the session cookie to work: it stops a third-party site from submitting a form on your behalf.
| Cookie | Purpose | Lifetime |
|---|---|---|
pharma_promo_dismissed |
Remembers that you closed the promotional banner in the pharmaceutical section, so it is not shown again. | About 180 days. |
Some pages include tags from Google, which set their own cookies in your browser. These are used to understand how the site is used in aggregate.
| Service | What it does | Where |
|---|---|---|
Google Tag ManagerGTM-PRBHB2 |
A container that loads other measurement tags. Cookies are set by whichever tags are configured inside the container. | Several public pages, including the home page. |
Google AnalyticsUA-42596171-1 |
Measures page views and visit patterns. This is a legacy Universal Analytics property. | A small number of legacy pages. |
UA-) properties no longer
collect data following Google's migration to GA4. These tags should be audited and either
migrated or removed, and the container's contents confirmed, so that this section stays accurate.
You can manage cookies in your browser settings — typically under Privacy or Security:
Most browsers also offer a "Do Not Track" signal. There is no agreed industry standard for honouring it, and the platform does not currently respond to it.
We will update this policy if the cookies we use change. The revision date at the top of this page reflects the current version.