Cookies & Tracking Disclosure

Strictly Necessary Always on

Required for the platform to function securely. Cannot be disabled. You cannot use YourMD Telehealth without accepting these.

• YOURMD_SECURE_SESSION — PHP session identifier for authenticated login state
• YOURMD_CSRF_TOKEN — cross-site request forgery protection token
• YOURMD_PACKET_REF — session integrity reference
• ymd_cookie_consent — your cookie preferences (this one!)

Functional Opt-in

Remember convenience preferences across sessions. Off by default — enable via the preferences button above.

• YOURMD_AUTH_TOKEN — 30-day remember-me token (only set if you check “Keep me signed in” at login)
• device_token — trusted device recognition, lets you skip MFA on known devices for up to 30 days
• pc_facility — remembered facility selection for multi-facility providers

Analytics Not used

We do not currently use any analytics cookies. No Google Analytics. No Matomo. No Adobe Analytics. No Mixpanel. No Hotjar. No session recording. The preference toggle exists for forward-compatibility; if we ever add de-identified usage measurement it will be announced in this document first.

Marketing & Advertising Not used

We do not use marketing or advertising cookies. No Facebook pixel. No Google Ads tag. No LinkedIn Insight Tag. No retargeting. No cross-site tracking. We will never sell or share your browsing data. This is enforced by the lack of any third-party script loads on our pages — you can verify it in your browser’s developer tools Network tab.