Cookie policy.
This Cookie Policy explains what cookies and similar storage or access technologies BiotrackOS Ltd (“BiotrackOS”, “we”, “our”), registered in Scotland (No. SC737158) with registered office at Canniesburn Gate, 10 Canniesburn Drive, Bearsden, Glasgow, G61 1BF, uses on biotrackos.com and any associated subdomains used to deliver the BiotrackOS platform and personal app. It forms part of our Privacy Policy, which describes how we handle your personal data more broadly.
What are cookies?
Cookies are small text files stored on your device by a website. Similar technologies — including mobile SDKs, local storage, and device identifiers — are covered by equivalent rules under UK PECR and comparable laws in other jurisdictions where we operate.
A cookie is a small text file stored on your browser or device when you visit a website. Similar storage or access technologies — including mobile SDKs, local storage, session storage, pixels, and device identifiers used in apps — serve comparable purposes and are governed by equivalent rules under UK Privacy and Electronic Communications Regulations (PECR) and equivalent laws in other jurisdictions. This policy covers all of these technologies. Cookies and similar technologies can be:
- Session: deleted automatically when you close your browser.
- Persistent: remain on your device for a set period or until you delete them.
- First-party: set directly by the site you are visiting.
- Third-party: set by a domain other than the one you are visiting. We do not currently use third-party cookies on our website.
Technologies we use on our website
We currently use only consent-exempt website technologies: strictly necessary authentication and security cookies. We do not use website analytics, advertising, or cross-site tracking technologies.
We currently use only strictly necessary cookies on biotrackos.com. Under UK PECR, strictly necessary cookies are exempt from consent requirements because they are essential for a service you have explicitly requested. We do not set any analytics, advertising, or tracking technologies on our website, so no cookie consent banner is currently required or shown.
| Cookie | Purpose | Duration | Category |
|---|---|---|---|
session | Maintains your authenticated session so you stay logged in as you navigate. | Session | |
csrf_token | Protects form submissions against cross-site request forgery (CSRF) attacks. | Session |
Cookie names and durations listed above reflect the current production implementation. No health data is contained in any of these cookies.
What we do not use
No analytics cookies, no advertising, no cross-site tracking on our website.
- Analytics or performance cookies: we do not currently measure website usage through cookies or browser-based technologies. If we introduce analytics in future, we will update this policy, list all new technologies here, and seek your consent before placing them.
- Advertising cookies: we do not use cookies to serve, target, or measure advertising.
- Tracking pixels or social media scripts: we do not currently embed social sharing buttons, tracking pixels, or third-party scripts that access storage on our website.
- Third-party tracking: we do not allow third parties to place cookies or similar technologies on any BiotrackOS domain or service.
Mobile app — Firebase Analytics
Disabled by default. Enabled only after you choose to allow it. No health data is passed to Firebase Analytics as configured.
The BiotrackOS personal app integrates Google Firebase Analytics, a mobile SDK that collects usage events and session data to help us understand how features are used. Firebase Analytics operates at the application layer and is entirely distinct from browser cookies.
- Default state: off — Firebase Analytics is disabled until you choose to enable it.
- Legal basis: Consent.
- Data collected: screen names, event names, session durations, general usage patterns, and a Firebase Installation ID (a device-level identifier). No health data is passed to Firebase Analytics as configured; event names, screen names, and custom properties are reviewed to prevent accidental health data disclosure.
- Retention: up to 14 months by default; raw event data is aggregated and older data deleted on a rolling basis.
- Provider: Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA); data may be processed on global Google infrastructure. Transfers of data from the UK or EEA are covered by EU Standard Contractual Clauses published by Google.
- Control: to enable or disable Firebase Analytics, contact privacy@biotrackos.com. Opting out stops future event collection; events already sent are not retroactively deleted.
Mobile app — Firebase Crashlytics
On by default to help us identify and fix application failures. No health data is included in crash reports as configured. You can opt out by contacting us.
The BiotrackOS personal app integrates Google Firebase Crashlytics, a crash-reporting SDK that captures information about application failures to help us diagnose and fix them quickly. Crashlytics operates at the application layer and does not place any cookie on your device.
- Default state: on — Crashlytics is enabled by default to maintain application stability and security.
- Legal basis: Legitimate interests (identifying and fixing application failures that affect the reliability and security of the service).
- Data collected: crash traces, stack traces, device model, operating system version, and a Crashlytics Installation UUID. Custom logs and user identifiers that BiotrackOS may attach to crash reports do not include health data; technical controls prevent accidental health data disclosure in crash reports.
- Retention: crash data is retained for 90 days, after which Google begins deletion.
- Provider: Google LLC (same entity and infrastructure as Firebase Analytics above). Transfers from the UK or EEA are covered by EU Standard Contractual Clauses published by Google.
- Control: to opt out of Crashlytics, contact privacy@biotrackos.com. We will process your request and disable crash reporting for your installation.
App store analytics
Apple (App Store) and Google (Google Play) independently collect certain analytics about app downloads and usage under their own terms and privacy policies, which BiotrackOS does not control. BiotrackOS may separately receive aggregated, non-identifiable reports from these stores (such as download counts and crash summaries) under their developer programme terms.
How to control cookies
Use your browser settings to block or delete website cookies. Contact us to manage Firebase preferences.
Browser settings
You can view, block, and delete cookies at any time through your browser’s settings. Because we use only essential cookies, blocking them will prevent you from logging in and using core features of the platform. Browser-specific guides:
App analytics and crash reporting
To manage Firebase Analytics or Crashlytics preferences, contact privacy@biotrackos.com. These controls are separate from browser cookie settings.
Do Not Track
Some browsers send a “Do Not Track” (DNT) signal to websites. There is no agreed technical or legal standard for responding to DNT signals, so we do not currently alter our behaviour based on one. Because we use only essential cookies, this makes no practical difference to how we operate today. We will review our position if a binding standard is established.
Changes to this policy
If we introduce non-essential cookies or additional tracking technologies, we will update this policy, add them to the relevant table, and seek your consent where required under UK PECR or applicable law before placing them. We will notify you of any material changes at least 30 days in advance in the same way described in our Privacy Policy. The current version is always available at biotrackos.com/cookies.
Contact
Questions about cookies or this policy: privacy@biotrackos.com
Data Protection Officer: dpo@biotrackos.com
BiotrackOS Ltd (SC737158) · Canniesburn Gate, 10 Canniesburn Drive, Bearsden, Glasgow, Scotland, G61 1BF