Cookie Policy

Who operates the website?

NURSE is operated by:

Our Privacy Policy explains the wider use of personal data and your rights.

What are cookies and browser storage?

A cookie is a small value saved by your browser and sent back to the website on later requests. NURSE uses a protected cookie to recognise your signed-in account.

The application also uses temporary tab storage, called sessionStorage, to retry a pending pause command when you return to a scenario. This storage is different from a cookie and is not sent automatically with every request.

The sign-in cookie

Name

__Secure-nurse.session_token on the public HTTPS website.

Provider and purpose

First-party NURSE authentication. It lets the server recognise a valid signed-in session and associate account requests with the right user.

Content

A protected session token. Your password is not stored in this cookie.

Duration

Up to seven days from sign-in, without automatic renewal. Signing out clears the current sign-in cookie and revokes that session. Password changes or administrator actions may revoke access sooner.

Protection

Secure, HttpOnly, SameSite=Lax and restricted to the website path. Browser scripts cannot read the cookie through the normal cookie API.

This cookie is needed for the account service you request by signing in. The public introduction and these legal pages do not require a signed-in account.

The temporary sign-in state cookie

When you choose Google or Apple sign-in, NURSE sets a necessary, signed state cookie named __Secure-nurse.state for up to five minutes. It binds the provider callback to the browser that started sign-in and is cleared when the callback is processed. It is Secure, HttpOnly and SameSite=Lax. A matching server-side state record, including callback and PKCE information, is valid for up to ten minutes and is consumed once.

Google or Apple may use cookies on its own sign-in pages under its own policies. NURSE does not embed provider tracking scripts or sign-in widgets; authentication opens the provider’s website when you choose that method.

The guest history cookie

NURSE sets a necessary guest cookie when the platform is used without signing in. It links this browser to a separate guest session history and lets you return to a saved Practice or Assessment session.

Name

__Host-nurse-visitor

Content

An opaque random browser identifier. It contains no password, name, message or patient information.

Duration

Up to 30 days from the last use of guest access. Guest session records expire separately 30 days after the last saved session activity. Clearing the cookie loses access; it does not instantly delete server records. Account history remains separate.

Protection

HTTPS only, HttpOnly, SameSite=Lax, and restricted to this host and the website path.

The technical traffic log may retain a separate one-way reference derived from this existing guest identifier, alongside request metadata, for up to 30 days. No additional tracking cookie is set, and the raw guest cookie is not stored in that log. The reference is not retained for authenticated account requests. Browser scripts cannot read the guest identifier. Do not share cookie values; they are private access credentials for this browser history.

Language preference cookie

NURSE uses the approximate country supplied by Cloudflare for the current request to select Romanian for Romania, German for Germany, Austria and Liechtenstein, and English for other countries. If country information is unavailable, it uses a supported browser language or English. This feature does not store your IP address or add it to your account profile. You can always select Romanian, English or German yourself.

Name

__Host-nurse-language on the public HTTPS website.

Provider and purpose

NURSE interface preferences. Available without signing in.

Content

Only the selected interface language.

Duration

Up to one year. You can replace it by changing language or remove it in your browser settings.

Protection

HTTPS only, HttpOnly, SameSite=Lax, and restricted to this host and the website path.

Set only when you choose a language. Stores ro, en or de, not your IP address, identity or account credentials. Your choice takes priority over automatic country-based selection.

Temporary scenario storage

Storage key

nurse-pending-pause:<scenario-session-id>

Purpose and content

Keeps the scenario identifier and a pending pause-command payload, including its command identifier, so the app can retry saving a pause after navigation or a temporary connection problem. It does not store your password.

Duration

Removed when the pending pause is successfully handled, or when the browser clears that tab's session storage, normally when the tab is closed.

Your saved learning history and profile are held on the server under your account. Clearing browser storage does not delete those records.

Other cookies, tracking and hosting

The current NURSE application has no advertising tags, optional analytics scripts or social-media tracking embeds. It does not use browser local storage to retain account credentials.

Cloudflare delivers and protects the website. It processes technical request information under its service policies. If a Cloudflare security check is served, it may use necessary security cookies to verify that check. These cookies are controlled by the security feature in use, rather than the NURSE sign-in cookie.

We do not currently offer an optional analytics or advertising cookie choice because these features are not enabled in the application. If we introduce optional storage or tracking that requires consent, we will update this policy and request your choice before enabling it. Read more about Cloudflare's privacy practices.

Your browser choices

You can clear or block cookies and site storage in your browser settings. Blocking the sign-in cookie prevents the account service from recognising you. Clearing it signs you out in that browser; it does not delete your NURSE account.

You can use the public homepage and these information pages without signing in. To request deletion of account or learning data, use the contact in the Privacy Policy.

Policy updates

This policy describes the current published application. We will update it when browser storage or relevant hosting features change. The date above identifies the current version.

See also the Privacy Policy and Terms & Conditions.