Legal
Cookie Policy
Short version: this website sets none, and the application sets two that only keep you signed in. There is nothing here that follows you around.
Last updated 4 September 2026
1.This website sets no cookies
The public clinexas.com website — this page, the landing page and everything else outside the application — sets no cookies at all, and stores nothing in your browser’s local storage.
We run no analytics, no advertising pixels, no session recording and no third-party trackers. Nothing you do on this site is profiled, and nothing is shared with an advertising network. That is why you have not been shown a cookie banner: there is nothing to consent to.
Fonts are served from our own domain rather than a font CDN, so simply reading this page does not announce your visit to a third party either.
2.Cookies inside the application
Once a member of laboratory staff signs in, two cookies are set. Both are strictly necessary — the service cannot keep you signed in without them — so they do not require consent under the ePrivacy rules or their Nigerian equivalent. Neither is used for tracking.
| Cookie | Purpose | Type | Expires |
|---|---|---|---|
| refresh_tokenHttpOnly, SameSite=Strict, Secure in production, scoped to the /api/v1/auth path. | Keeps you signed in. Holds the token used to mint a new short-lived access token when you reload the page. | Strictly necessary | Until the session expires or you sign out |
| jjlms_sessionCarries no token and no personal data — only the fact that a session exists. | A flag saying a session probably exists, so a signed-out visitor is sent to the login page without a wasted round trip and without a flash of protected screen. | Strictly necessary | Until you sign out |
The Platform Admin portal used by our own staff keeps its session in memory only and sets no cookie at all — closing the tab signs you out.
3.Controlling cookies
Every browser lets you view and delete cookies, and block them by site. Because both of ours are strictly necessary, blocking them means you will not be able to stay signed in — you will be returned to the login page on every request.
Clearing them is equivalent to signing out. It does not delete any laboratory or patient data.
4.If this changes
If we ever add a cookie that is not strictly necessary — analytics, for instance — we will ask for your consent before setting it, and update this page first. We will not quietly start tracking.
This policy sits alongside our Privacy Policy, which covers everything else we hold. Questions: [email protected].
Questions about this policy
Write to [email protected]. If you are a patient rather than a laboratory, contact the laboratory that tested you first — they hold your clinical record and decide how it is used.