1. What this policy covers
This Cookie Policy explains how Medical Training Navigator Australia uses cookies, local storage, session storage, and similar browser technologies when you visit our site, including routes /privacy, /terms, and /cookies. It supplements our Privacy Policy with technical detail on storage purposes, categories, and your controls.
Placeholder for formal contact details: legal entity name, ABN, and correspondence address to be updated on registration. For now, use the contact method in Section 9.
2. What cookies and storage mean
Cookies are small text files placed on your device by a website. Local storage and session storage are browser features that let a site store small amounts of data locally to remember state between pages or sessions. We use a combination of these to make the navigator work reliably.
- First-party: set directly by Medical Training Navigator Australia and Buildy platform auth.
- Session: deleted when you close the browser or sign out.
- Persistent: remains for a set duration to remember preferences, unless you clear it.
3. Essential cookies and authentication — required
These are required for the service to function and cannot be switched off in our systems. If you block them, sign-in, review submission, and moderation safeguards will not work.
| Name / storage key pattern | Purpose | Duration |
|---|---|---|
| sb-* auth token, buildy session | Keeps you signed in, verifies you as creator of pending private reviews, protects entity access with row-level policies. | Session to 30 days depending on remember choice; cleared on sign out |
| csrf / security nonce | Prevents cross-site request forgery and replay for auth flows. | Session |
We do not use third-party advertising or cross-site tracking cookies in v1 and do not allow hospitals, health districts, LHNs, or HHS to place cookies via our pages.
4. Preference and functionality storage — improves usability
These remember choices you make so the discovery experience feels continuous.
| Storage | Purpose | Duration |
|---|---|---|
| filter state, search text | Remembers your state, district, specialty, stage, setting, and search so navigating back keeps your view. | Session / local until cleared |
| compare tray ids | Keeps up to three programs in your comparison tray between page views. | Local until cleared or tray cleared |
| UI dismissed flags | Stores whether you dismissed the mission banner or filter tips so we do not repeat them. | Persistent local |
These are first-party only. No personal health information or patient data should ever be stored in these preferences.
5. Analytics and measurement — not active in v1, planned transparently
Medical Training Navigator Australia does not currently run third-party analytics, market-research cookies, or advertisement measurement pixels. Filter usage and search counts described in our Privacy Policy are aggregated within the product without external trackers in this version.
If we add privacy-preserving analytics in the future to understand discovery patterns and improve workforce transparency features, we will:
- Update this Cookie Policy before enabling any analytics storage.
- Update the Privacy Policy with the purpose and retention.
- Use only providers that do not sell data and do not allow hospital-paid targeting.
- Consider providing an opt-out or consent control where required under Australian privacy guidance and browser standards at that time.
6. Supabase and Buildy platform storage notes
Our hosting and data layer uses Buildy infrastructure and Supabase for entities including TrainingProgram and ReviewSubmission. Their authentication services place session tokens in browser storage to maintain login. These tokens are essential and scoped to keep pending private reviews visible only to their creator and authorized moderation, consistent with row-level policies. We do not control Supabase or Buildy cookie names beyond integration requirements, but we require them only for auth and security.
If you sign out via the header Sign out action, we clear session tokens on our side and invalidate the server session. You should also clear browser storage if using a shared device.
7. How to manage or delete cookies and storage
You control cookies and site storage through your browser settings. Most browsers allow you to:
- View cookies and local storage set by Medical Training Navigator Australia and delete specific entries.
- Block first-party cookies for this site, with the consequence that sign-in and review submission will not function.
- Clear all browsing data, which will remove filter and compare tray memory as well as remove essential session tokens and sign you out.
- Use a private or incognito window to test discovery without retaining filter memory.
Chrome: Settings → Privacy and security → Cookies and other site data → See all site data. Safari: Settings → Privacy → Manage Website Data. Firefox: Settings → Privacy & Security → Cookies and Site Data → Manage Data. Edge: Settings → Cookies and site permissions → Manage and delete cookies. For local storage, open DevTools → Application → Local Storage / Session Storage.
8. Retention
Essential auth tokens are retained for your session and, where you remain signed in, up to 30 days or until you sign out or clear storage. Preference storage for filters, search text, and compare tray persists locally on your device until you clear it via browser settings or use Clear all filters / Clear comparison in product. See Privacy Policy Section 8 for server-side retention of pending reviews.
9. Changes to this policy and contact
We may update this Cookie Policy when product features change, for example if analytics as described in Section 5 becomes active. The last-updated date at the top of this page will change at that time and, where material, we will provide an in-product notice.
Placeholder: Update with support email before public launch. Current draft contact: cookies@medicaltrainingnavigatoraustralia.com or privacy@medicaltrainingnavigatoraustralia.com (example placeholder). Include subject: Cookie Request — Medical Training Navigator Australia and describe your device and browser if reporting an issue.
No consent banner is implemented in this run as required; this policy documents current storage and future transparency plan. If a banner becomes required due to analytics introduction or legal change, we will add it and update this policy to reference banner controls.
