Cookie Policy
Version 1, published October 28, 2026
This Cookie Policy explains which cookies and similar technologies Lessora sp. z o.o. uses on https://lessoramed.com and in the Lessora Med app, including clinic addresses such as yourclinic.lessoramed.com, clinics' own domains, and the visit, payment and offer pages clinics send to their patients.
What cookies are
Cookies are small text files a website stores in your browser. Similar technologies, such as the browser's local storage, work the same way for our purposes. We call all of them "cookies" here.
The cookies we use
| Name | Set by | Type | What it does | Kept for |
|---|---|---|---|---|
lessora-med-session |
Lessora | Necessary | Keeps you signed in and remembers choices during your visit | Until you close the browser or sign out |
XSRF-TOKEN |
Lessora | Necessary | Protects forms against cross-site request forgery | Until you close the browser or sign out |
remember_web_* |
Lessora | Necessary | Keeps you signed in when you tick "Remember me" | 30 days |
__cf_bm |
Cloudflare | Necessary | Tells people from bots to protect the site | 30 minutes |
appearance |
Lessora | Preferences | Remembers light, dark or system theme | 1 year |
sidebar_state |
Lessora | Preferences | Remembers whether the app menu is open | 7 days |
appearance, analytics_consent |
Lessora | Preferences | Browser storage for your theme and your cookie choice | Until you clear your browser data |
_ga, _ga_* |
Analytics (only with your consent) | Counts visits and how the site is used | Up to 2 years |
- Necessary cookies are needed for the website and the app to work and to keep them secure (for example to keep you signed in). They don't need your consent.
- Preferences remember choices you make, such as the theme. They are only set when you make that choice.
- Analytics cookies (Google Analytics) are loaded only after you click "Accept" in the cookie banner, on our website or in the app. The website and the app ask separately. In the app we send only which kind of page was opened (for example "a patient's page", never which patient), your role and technical data such as your browser; we don't send names, the clinic's address, record numbers or anything you enter. Pages a clinic sends to its patients (visit, payment and freed time pages) don't load analytics.
Your choice
You can change your analytics choice at any time with "Cookie settings" at the bottom of every page of our website, or in the user menu of the app. Withdrawing consent doesn't affect what happened before.
You can also block or delete cookies in your browser settings. If you block necessary cookies, signing in won't work.
Bot protection
Our sign-up form uses Cloudflare Turnstile to tell people from bots. It runs a check in your browser and may store technical data needed for it, under Cloudflare's privacy policy. It is not used for analytics or advertising.
Payment pages
When a clinic owner pays for a plan, sets up online payments, or a clinic's patient pays online, you are taken to pages run by Stripe (for example checkout.stripe.com). Stripe sets its own cookies there for payment and fraud prevention, under Stripe's cookie policy.
More information
How we handle personal data is described in our Privacy Policy. Questions: [email protected].