This Cookies Policy explains how MedCMS uses cookies, browser storage, session identifiers, and limited operational analytics.
Effective date: 2026-05-05
Version: 1.0
Applies to: MedCMS public pages, educational articles, reserved reader access, account-linked reader features, and related website functions.
1. Scope
This Cookies Policy explains how the MedCMS website (the Site) uses cookies and similar technologies such as browser storage, security tokens, and session identifiers. It should be read together with the Privacy Policy.
2. What cookies and similar technologies are
Cookies are small text files placed on your device by a website. Similar technologies include local storage, session storage, security tokens, and browser-based identifiers needed for website operation.
3. Our principles
- We use only technologies that are reasonably necessary for Site operation or clearly disclosed optional features.
- We do not use non-essential cookies without an appropriate legal basis.
- Where consent is required, non-essential cookies remain off until valid consent is given.
- If optional analytics, embeds, or similar tools are added later, this Policy and the consent mechanism must be updated before rollout.
4. Categories used
- Strictly necessary cookies: deliver the website, maintain secure sessions, support sign-in, protect against abuse/CSRF-type attacks, and remember a valid cookie preference.
- Functional preference technologies: remember saved-article state or presentation preferences where enabled.
- Operational analytics: limited first-party telemetry for availability, security, performance, and fault diagnosis.
- Third-party embedded content: only if deliberately enabled and disclosed; consent is required where applicable.
5. Current MedCMS technology position
The Site is intended to rely mainly on Joomla session/security cookies, Authentik authentication/session cookies for reserved-content access, limited browser storage for user convenience features, and limited first-party operational telemetry used for security, availability, performance, and fault diagnosis.
The Site does not intentionally deploy advertising or marketing trackers unless deliberately configured, disclosed, and, where required, placed behind consent.
6. Expected cookie and storage inventory
| Category | Provider | Purpose | Duration | Consent status |
|---|---|---|---|---|
| Strictly necessary | MedCMS / Joomla | Maintains website session and request integrity | Session or short-lived | Not required where strictly necessary |
| Strictly necessary | Authentik | Maintains secure sign-in and reserved-content access | Session or short-lived | Not required where strictly necessary |
| Functional | MedCMS | Stores user-selected saved-article state on the device where enabled | Until removed by the user or application logic | Depends on legal classification and local law |
| Preference | MedCMS | Stores cookie preference choice where deployed | Defined by consent-tool configuration | Not required for storing the preference itself once a valid choice is made |
| Operational analytics | Moebiusol / MedCMS | Measures availability, reliability, errors, and core service performance | Limited operational-retention window | Consent if not strictly necessary under applicable law |
7. Legal basis and consent
Where applicable law requires consent for non-essential cookies or similar technologies, we rely on consent before placing or activating them. For EU users and similar regimes, strictly necessary cookies may be used without consent, while non-essential analytics, advertising, profiling, or optional third-party tracking require prior consent.
This same practical rule is applied for jurisdictions with similar transparency and user-choice requirements, including relevant international and African privacy laws, unless stricter local law applies.
8. Managing preferences
You can manage cookies through Site controls where available, browser settings, clearing browser cookies/local storage, or blocking optional cookies. Blocking strictly necessary technologies may prevent sign-in or reserved-content access from working correctly.
9. Third-party services
If the Site links to or embeds third-party services, those providers may collect information through their own technologies once their content is activated. Their own policies apply.
10. Changes
We may update this Policy to reflect Site configuration, legal requirements, cookies, storage technologies, or integrations. The effective date will be updated when changes are published.
11. Contact
Questions about cookies or similar technologies:
