Cookie Policy

Last updated: July 2026 · Maintained by the DoseRoutine team.

Summary

DoseRoutine uses a small number of strictly-necessary cookies and browser storage items to keep you signed in and remember your preferences. We do not use third-party advertising cookies and we do not sell your data.

Strictly necessary (always on)

Auth session — keeps you signed in. Set by our authentication provider. Expires when you sign out.
CSRF / security tokens — protect forms and API calls from cross-site attacks.
Stripe checkout — set by Stripe on the checkout page to process payments and prevent fraud (only present when you open checkout).

Preferences (functional)

Language — remembers your chosen language (12 supported).
Units — metric vs imperial.
Interaction acknowledgements — remembers which major interactions you've reviewed so we don't nag you.
Cookie banner state — remembers that you dismissed the banner.

Analytics

We use privacy-respecting product analytics to count anonymous pageviews and conversions. No cross-site tracking, no advertising cookies, no fingerprinting. IP addresses are truncated before storage.

What we do not use

Third-party advertising cookies
Cross-site tracking pixels
Data brokers or ad networks
Social media "like" trackers

Controlling cookies

You can clear cookies and browser storage at any time from your browser settings. Clearing the auth cookie will sign you out. Clearing preference storage will reset language, units, and acknowledgements to defaults. Signing out from More → Account ends the session on this device.

Do Not Track

DoseRoutine respects "Do Not Track" and "Global Privacy Control" signals for optional analytics. Strictly-necessary cookies remain in use because the app can't function without them.

Contact

support@doseroutine.com

Frequently asked questions

What cookies does DoseRoutine use?

DoseRoutine uses a small number of strictly-necessary cookies for the auth session, CSRF/security tokens, and Stripe checkout, plus functional preference cookies for language, units, interaction acknowledgements, and cookie-banner state. It does not use third-party advertising cookies.

Does DoseRoutine use advertising or tracking cookies?

No. DoseRoutine does not use third-party advertising cookies, cross-site tracking pixels, data brokers, ad networks, or social media 'like' trackers. It only uses privacy-respecting product analytics that count anonymous pageviews and truncate IP addresses before storage.

Does DoseRoutine respect Do Not Track?

Yes, DoseRoutine respects 'Do Not Track' and 'Global Privacy Control' signals for optional analytics. Strictly-necessary cookies, such as the auth session cookie, remain in use because the app cannot function without them.

What happens if I clear my cookies?

Clearing the auth cookie signs you out. Clearing preference storage resets your language, units, and interaction acknowledgements to their defaults. You can also sign out directly from More → Account to end the session on that device.

What analytics does DoseRoutine collect?

DoseRoutine uses privacy-respecting product analytics to count anonymous pageviews and conversions. There is no cross-site tracking, no advertising cookies, and no fingerprinting, and IP addresses are truncated before they are stored.

What we actually store on your device

DoseRoutine keeps the number of browser-stored items deliberately small. The essential ones are your authentication session, which is what stops you having to sign in on every page, and a handful of local preferences such as your theme, measurement units and which view you last had open. Those are stored on your device rather than sent anywhere on each request.

Local storage is also used as an offline buffer. Doses you log without a connection are written locally and replayed to the server when you reconnect, which is why the app can be used on a plane or in a basement gym without losing the record.

Analytics and what it is not

We use privacy-conscious product analytics to understand which pages and features are used, and to catch errors. That data is aggregate and behavioral — pages visited, features opened, errors encountered. It does not include what compounds you track, your doses, your logs, your photos or your health notes. Those never enter the analytics pipeline.

We do not run advertising cookies, we do not sell data, and we do not operate cross-site tracking pixels for ad networks.

Controlling it

You can clear site data from your browser settings at any time; the effect is that you are signed out and your local preferences reset. Blocking cookies entirely will prevent sign-in from working, because the session has nowhere to live. Analytics can be blocked with any standard content blocker without breaking the app.

If you want everything gone, use the account deletion flow rather than just clearing your browser — that removes the server-side record as well as the local one.