COMFORTNOTES · PRODUCT POLICIES
Cookies
Clear information about the product and the organisation behind it.
Who operates ComfortNotes?
ComfortNotes is operated by Homecare Comforts Ltd, trading as Comforts Hearing. ComfortNotes is the product name, not a separate legal company.
Registered company name: Homecare Comforts Limited. Company number: 12224982. Registered office: 65 Seymour Avenue, Morden, Surrey, SM4 4RF, United Kingdom. These pages concern ComfortNotes, not the separate Comforts Hearing clinic website.
Raymond Hill is responsible for ComfortNotes support, security incidents and privacy requests. Contact: info@comforts-hearing.co.uk. Include ComfortNotes and your clinic name. Do not email patient records, photographs, audio, passwords or API keys.
Stripe checkout and billing portal
If you choose to pay or manage a subscription, Stripe opens its hosted checkout or billing portal. Those external pages have their own browser-storage and privacy arrangements. The application storage inventory below does not describe Stripe’s pages. See Stripe’s privacy policy before using its payment services.
Password recovery cookie
__Host-comfortscribe_recovery is used only when you request a password-recovery email. It contains a random reference, not your password. Secure, HttpOnly and SameSite=Strict protections apply. It expires after 15 minutes, is cleared after a successful reset and binds the email link to the browser that requested it. Encrypted server recovery records expire after 15 minutes and are removed by the bounded hourly cleanup; expired records cannot reset a password.
Essential sign-in cookie
Name: __Host-comfortscribe_session. This first-party cookie keeps your authenticated session linked to the server. Its technical name is retained for compatibility. It is set after sign-in, not simply by reading this page. It is marked Secure, HttpOnly and SameSite=Strict.
Duration: up to eight hours. The server session also expires after 30 minutes without a service request. Sign-out clears the cookie. Blocking it prevents signed-in features from working. The local development preview uses the equivalent comfortscribe_session cookie.
Cookie-notice preference
Name: comfortnotes.cookie-notice.v1. When you select Got it, session storage saves the word dismissed so the notice stays hidden during this tab session, including refreshes. It contains no patient information or tracking identifier. Closing the tab normally clears session storage; browser session restoration can restore it.
This acknowledges a notice; it does not accept terms or give permission for recording, AI processing or optional tracking. The Cookies link remains available in the footer. If browser storage is unavailable, the notice can still be dismissed for the current page.
No optional tracking in this app
The separate public information pages offer optional, consent-based analytics. Their cookie information and settings explain those choices. These scripts never load in this clinical application.
The application code does not set optional analytics or advertising cookies. There are no optional cookie categories to accept or reject in this version. Essential sign-in storage is used to provide the signed-in service you request. New tracking features would need a separate assessment and, where required, prior consent.
Fonts are hosted by ComfortNotes, so viewing the app does not request fonts from Google. Temporary notes and audio in the open tab are explained in the Privacy Policy. This notice describes application-managed browser storage, not every hosting-provider log or infrastructure component.
Optional tour preference
When you finish, skip or dismiss the welcome tour, local storage keeps comfortnotes:workspace-tour:v1 with only completed or skipped. This preference stays on this browser until you clear it. It contains no account or patient information and is not sent to our servers. On shared browsers it applies to everyone; Replay tour remains available on How it works and in Notes & recording help.
Trial welcome preference
Dismissing the clinic-trial welcome stores a browser preference under comfortnotes:trial-welcome:v1: followed by a hashed account, clinic and trial identifier. The value is only dismissed; no patient details or email address are stored in plain text. This pseudonymous preference is not sent to our servers. Clearing browser storage or using another browser may show the welcome again. If storage is blocked, dismissal lasts only in the current tab.
Your browser choices
You can clear site cookies, local storage and session storage in your browser. Clearing the sign-in cookie signs you out; clearing the notice marker allows the notice to appear again on reload. Save your work before clearing browser data. These controls are separate from appointment recording and information and processing checks.
Optional analytics on public information pages
Only the separate About, How it works and Evaluating ComfortNotes pages offer Google Analytics. It loads only after you choose Accept analytics. The clinical application, sign-in, registration, forms, patient information and private workspaces do not load Google Analytics. No notes, recordings, patient references, form entries, query strings or URL fragments are sent.
With consent, Google receives public page views, a clinic-registration link click and technical browser/device information. Analytics cookies (_ga and _ga_*) expire after 60 days; the consent choice (comfortnotes.public-analytics.v1) is stored locally for up to 180 days. We disable advertising features and automatic interaction measurement. Google may process information outside the UK. See Google’s privacy policy.
Use Cookie settings on a public page to withdraw consent at any time. Essential only stops measurement, clears these analytics cookies and reloads that public page. Browser privacy signals are respected. This choice is separate from clinical recording and processing permissions.