Last updated: 8 August 2026
Cookie Policy
This policy explains the small pieces of browser data Whisper Health uses, why they are used, and the choices available to you.
1. What cookies are
A cookie is a small piece of data a website asks your browser to store. When your browser later makes a request to the same site, it can send the relevant cookie back. This helps a site recognise an active session or remember a limited preference.
A cookie can be created by a server response or, in some cases, by browser-based code. This policy also covers similar browser storage where it is used for the purposes described below. Cookies are not automatically a copy of your health information; their purpose and the way they are protected matter.
2. How Whisper's essential session cookies work
When you sign in, or when an authenticated session is refreshed, Whisper's authentication service can instruct your browser to store essential session cookies. On later requests to Whisper's protected services, the browser sends the applicable cookies automatically so the service can determine whether your session is valid.
Whisper's frontend is designed not to read or store authentication tokens in page JavaScript. The session cookies are intended to use HttpOnly protection, which prevents page JavaScript from reading them; Secure protection in production, which limits transmission to HTTPS; and SameSite controls, which help limit cross-site sending. These controls reduce risk but do not remove the need to protect your device, browser and account.
3. Categories we use
Category
Purpose
Your choice
Strictly necessary session cookies
Keep an authenticated session working, protect sign-in and support the secure refresh of a session.
Required for signed-in features. Blocking or deleting them can sign you out or prevent protected features from working.
Preference storage
Remember a choice you make in the app, such as a display preference, where that feature uses browser storage.
You can remove this through your browser settings. The related preference may reset.
Analytics, advertising and social-media tracking
Not currently approved for Whisper Health production use.
If we introduce an optional technology in this category, we will update this policy with its provider, purpose and choice control before enabling it.
4. What we do not use for health profiling
Whisper Health does not approve advertising cookies, social-media tracking cookies or optional analytics cookies for production use to profile a person's health activity. We will not add an optional cookie or similar tracking technology without first documenting the provider and purpose here and giving people an appropriate choice mechanism.
5. Managing cookies and browser storage
You can inspect, delete or block cookies using your browser's privacy settings. Deleting or blocking essential session cookies may sign you out, interrupt account recovery or stop protected features from functioning. Browser controls do not delete information already held in Whisper's systems; for personal-information requests, use the contact details in our Privacy Notice.
If you use a shared device, sign out when you finish and consider clearing browser data. Do not rely on clearing cookies alone to secure an account if another person can access your device or browser profile.
6. Changes and contact
We may update this policy when our technology or practices change. Material changes will be reflected through an updated date and, where appropriate, an in-app notice or consent choice before an optional technology is enabled.
Read our Privacy Notice and Terms and Conditions, or contact support@whisperhealth.com with questions about this policy.