Legal & Privacy

Transparency regarding
your data and rights

Clear, accessible information on how we protect your medical data, manage cookies, and the terms of using the CannaLog platform.

Cookie & Storage Policy

Last Updated: 24th of April 2026

1. Introduction

This policy explains how we use Cookies, Local Storage, and similar technologies on the CannaLog website and Progressive Web App (PWA). This should be read alongside our Privacy Policy.

2. What are Cookies & Local Storage?

  • Cookies: Small text files stored on your browser to remember who you are.
  • Local Storage: Allows the app to store data on your device. This is crucial for PWAs to work offline and load quickly.

3. How We Use These Technologies

  • Strictly Necessary: Required for Authentication (Azure AD / Identity) and Security (CSRF protection).
  • Functionality: Remembering preferences (e.g., UI settings) and Offline Mode (caching your journal entries locally for faster access).
  • Performance (Optional): Anonymous analytics via Azure Application Insights (internal stability monitoring) and Google Analytics 4 (public-site traffic). Both are disabled by default and only activate after you click Accept & continue in the cookie banner.

4. Key Providers

Provider Type Purpose
Microsoft Azure Essential Secure user login, authentication tokens, and security.
Docker / Azure Web App Essential Application hosting, routing, and performance.
Azure App Insights Performance Anonymous telemetry and error tracking.
Google Analytics 4 Performance (Optional) Aggregated public-site traffic metrics — how visitors find and use cannalog.co.uk. IP anonymisation on, ad signals off. Never used on the patient portal or with patient data. Off until you accept.

5. Controlling Your Cookies

Because CannaLog relies on Local Storage to function as an App, blocking all storage may break the application (e.g., login failures or inability to save sessions).

You can manage non-essential analytics via our cookie banner or through your browser settings. Strictly necessary tokens are required to maintain a secure connection to your account.

6. Contact

If you have questions regarding our use of storage technologies, please contact: dpo@cannalog.co.uk.

If you have specific questions about our legal policies, please reach out to our Data Protection Officer at dpo@cannalog.co.uk.