Cookie and analytics disclosure

This page is a working draft for review by counsel. It is not an approved policy, not a contract, and not legal advice. Do not rely on it as the final position of the Canadian Hospital Education Partnership.

The public site does not require an account. A session cookie named chep_session is set only after an administrator signs in. It is httpOnly, SameSite=Lax, and used to keep that person signed in. It is not used to advertise.

Analytics is off unless NEXT_PUBLIC_ANALYTICS_PROVIDER and NEXT_PUBLIC_ANALYTICS_ID are both set in the hosting environment. This repository does not contain a tracking identifier. If analytics is turned on later, this page must be updated before the script is relied on.