| Name | Type | Purpose | Lifetime | Essential? |
|---|---|---|---|---|
vma_portal_session | localStorage | Patient portal login token (Bearer) | Until logout / 60 minutes | Strictly necessary |
vma_portal_refresh | localStorage | Refresh token (Bearer) | 30 days | Strictly necessary |
vma_portal_lang | localStorage | Selected UI language | Persistent | Functional preference |
vma_cookie_ack | localStorage | Records that user dismissed this banner | Persistent | Strictly necessary |
No third-party tracking cookies. No analytics. No advertising. No fingerprinting.
Strictly-necessary entries are exempt from the consent requirement of the ePrivacy Directive Art. 5(3) (carry-out of communication / explicitly requested service). The functional language preference is set only after the user dismisses the cookie banner (opt-in).
Browser-side: Site Settings → Clear data on the portal origin. Clearing the data logs the patient out and resets language preference.