Cookie Policy

This Cookie Policy explains how Elderly Care Match LLC ("Elderly Care Match," "we," "our," or "us") uses cookies and similar technologies on our website and platform (the "Platform").

This policy should be adopted together with our Privacy Policy and Terms of Service.

1. What Are Cookies?

Cookies are small text files stored on your device (computer, smartphone, or tablet) when you visit a website. They help websites remember your preferences, maintain secure sessions, and understand how the site is used.

Cookies may be:

·       Session cookies – deleted when you close your browser

·       Persistent cookies – remain for a defined period or until deleted

2. How We Use Cookies

Elderly Care Match uses cookies strictly for essential functionality, security, and limited platform analytics. We categorize cookies as follows.

Note: Cookie names, durations, and technical implementations may change as our platform evolves.

2.1 Strictly Necessary Cookies (Essential)

These cookies are required for the Platform to function and cannot be disabled.

Examples:

·       accessToken
Purpose: Authentication (stores login session)
Security: httpOnly, Secure, SameSite=Strict
Duration: ~15 minutes

·       refreshToken
Purpose: Session renewal
Security: httpOnly, Secure, SameSite=Strict
Duration: ~7 days

·       next-auth.csrf-token
Purpose: CSRF protection
Duration: Session

·       nextLocale
Purpose: Stores language preference
Duration: ~1 year

Security Note: Authentication cookies use httpOnly and Secure flags and are transmitted only over HTTPS.

We do not store Protected Health Information (PHI) in cookies.

2.2 Functional Cookies

These cookies support enhanced usability:

·       userLocation – remembers general location for facility search (≈30 days)

·       searchPreferences – saves search filters (≈30 days)

·       theme – stores display preferences (≈1 year)

2.3 Analytics Cookies (Limited & Internal)

We use minimal internal analytics for platform improvement:

·       Page views

·       Feature usage

·       Error tracking

·       Performance metrics

Analytics data is anonymized and aggregated and does not contain PHI.

2.4 Third-Party Cookies and Services

We use limited third-party services under contractual confidentiality and security obligations:

·      Stripe – payment processing (subscriptions and placement-related fees)

·      Mapbox – interactive maps for facility locations

·      AWS CloudFront – content delivery network (CDN)

3. Cookies We Do NOT Use

To protect user privacy and limit data exposure, we do not use:

·       ❌ Advertising or retargeting cookies

·       ❌ Social media tracking pixels (Facebook, LinkedIn, TikTok, etc.)

·       ❌ Third-party behavioral analytics (Google Analytics, Adobe Analytics, etc.)

·       ❌ Cross-site tracking cookies

·       ❌ Behavioral profiling for marketing

4. Security and Data Protection

While cookies themselves do not store PHI, our authentication cookies and session handling implement security controls aligned with industry-standard security practices, including:

·       httpOnly cookie flags (XSS protection)

·       Secure transmission over HTTPS only

·       SameSite=Strict configuration (CSRF protection)

·       Short session lifetimes

·       Token rotation on refresh

PHI is stored only in encrypted databases and systems protected by:

·       AES‑256 encryption at rest

·       TLS 1.2+ encryption in transit

·       Role-based access controls

·       Comprehensive audit logging

5. Managing Cookie Preferences

5.1 Browser Controls

Most browsers allow you to view, delete, or block cookies:

·       Chrome: Settings → Privacy and security → Cookies and other site data

·       Firefox: Settings → Privacy & Security → Cookies and Site Data

·       Safari: Preferences → Privacy → Manage Website Data

·       Edge: Settings → Cookies and site permissions → Cookies and site data

5.2 Impact of Disabling Cookies

Disabling essential cookies will prevent you from:

·       Logging into your account

·       Accessing dashboards

·       Submitting intake forms

·       Making payments

·       Managing subscriptions

Functional or analytics cookies may be disabled with limited impact on core features.

6. Mobile Devices

Our mobile website follows the same cookie practices.

Cookie controls:

·       iOS Safari: Settings → Safari → Block All Cookies

·       Android Chrome: Settings → Site settings → Cookies

If a native mobile app is released, this policy will be updated accordingly.

7. Do Not Track (DNT)

Some browsers send a “Do Not Track” signal. There is currently no industry standard for responding to DNT signals.

Regardless, we enforce the following by default:

·       No advertising cookies

·       No cross-site tracking

·       No PHI in cookies

·       Minimal data collection

8. Children’s Privacy

Our Platform is not intended for individuals under 18. We do not knowingly collect information from children through cookies.

9. Changes to This Cookie Policy

We may update this policy periodically. Material changes will be communicated by:

·       Updating the “Last Updated” date

·       Posting a notice on the Platform

·       Email notification where appropriate

10. Governing Law

This Cookie Policy is governed by the laws of the State of Washington.

11. Contact Us

Privacy Contact
Elderly Care Match LLC
Email: support@elderlycarematch.com
Phone: 206‑771‑2112

12. Related Policies

·       Privacy Policy

·       Terms of Service

·       Accessibility Statement