Cookies
Cookie Notice
This Cookie Notice explains how SurgeonAI uses cookies, SDKs, pixels, local storage, and similar technologies when you visit our website or use the Service.
1. What these technologies do
Cookies are small files placed on your device. Similar technologies may store or read information from your browser or device. They can be necessary for the Service to work, remember choices, understand performance, and—where you permit it—measure communications or marketing.
2. Our categories
| Category | Purpose | Consent position |
|---|---|---|
| Strictly necessary | security, fraud prevention, load balancing, account login, session management, preference storage necessary to provide the Service | always active; cannot be switched off through the banner |
| Functional | remember non-essential preferences, such as display settings or accessibility choices | enabled only where permitted by law or with consent where required |
| Analytics | understand aggregate use, diagnose performance, and improve the website and Service. We use Google Analytics 4 for this, and nothing else | off by default; nothing is requested from Google, and no analytics cookie is set, until you consent |
| Marketing | measure campaign performance or deliver personalised advertising | off by default; consent required where applicable |
3. Your choices
When required, we will ask for your consent before placing non-essential cookies. You can accept, reject, or change your choice at any time via the Cookie settings link in the website footer. You can also manage cookies through browser settings, although blocking necessary cookies may prevent parts of the Service from working.
4. Current cookie inventory
These are the only cookies SurgeonAI sets itself. All are first-party and strictly necessary; none are used for analytics, profiling, or advertising. The third-party analytics cookies that Google Analytics sets once you consent are listed separately in section 6.
| Name | Category | Purpose | Duration |
|---|---|---|---|
| panel-auth | Strictly necessary | Your signed-in session. It holds a signed session token, is marked httpOnly so page scripts cannot read it, and is sent only to SurgeonAI | 7 days from sign-in |
| panel-2fa-pending | Strictly necessary | Set only if you use two-factor authentication: it links your correct password to the code you are about to enter. It is not a session and cannot access your account on its own | 5 minutes |
| panel-oauth-state | Strictly necessary | Set only while you sign in with Google: it holds the one-time verification secret that ties Google’s reply to the browser that started the sign-in. It is httpOnly, is not a session, and is deleted when sign-in completes | 10 minutes |
| panel-force-reset-pending | Strictly necessary | Set only when your account must choose a new password before continuing (for example after an account migration): it links your successful sign-in to the password change you are about to make. It is not a session and cannot access your account on its own | 10 minutes |
| demo-session | Strictly necessary | Set only when you choose a demonstration persona in a demo or development build. It names the sample persona whose fictional data you are viewing and never grants access to a real account | 24 hours, or until you leave the demo |
5. Local storage we use
The items below are not cookies. They are stored in your browser’s local storage and stay on your device; none of them is transmitted to us unless the row says otherwise, and only one does — the referral code, which is sent with a checkout request at the moment you choose a plan. You can clear them at any time through your browser’s site-data controls.
| Key | Purpose | Duration |
|---|---|---|
| surgeonai.consent | Records your response to the cookie and privacy banner so we do not ask again | Until you clear site data |
| surgeonai.theme | Remembers whether you chose the dark or light appearance | Until you clear site data |
| surgeonai.sound | Remembers whether you switched off the ambient audio on our website | Until you clear site data |
| surgeonai.tutor.autotts | Remembers whether you want the AI tutor’s answers read aloud automatically | Until you clear site data |
| surgeonai.tutor.lang | Remembers the language you selected for AI tutor content | Until you clear site data |
| surgeonai.tour | Remembers where you are in the guided product tour so it can pause and resume | Until you clear site data |
| surgeonai.consent.autotts | Remembers whether you want the consent-conversation trainer’s patient replies read aloud automatically | Until you clear site data |
| surgeonai.viva.autotts | Remembers whether you want the viva examiner’s questions read aloud automatically | Until you clear site data |
| surgeonai.referral | Remembers a referral or promo code you typed or arrived with (a ?ref= link) so it is prefilled when you choose a plan; it is sent to us only when you start a checkout | Until you clear the field or your site data |
| surgeonai.podcast.<id> | Remembers how far into a podcast episode you listened so it resumes where you stopped. One entry per episode you have played, on this device only | Until you clear site data |
6. Analytics cookies (Google Analytics 4)
If you consent to analytics cookies, our website loads Google Analytics 4, provided by Google Ireland Limited, so that we can see how many people visit, which pages they read, and where the site performs poorly. Nothing is requested from Google — not the measurement script, not a cookie, not a “consent denied” signal — until you have consented. IP addresses are anonymised by Google Analytics 4, advertising features and ad personalisation are switched off, and we read the results only in aggregate. Google Ireland Limited is listed on our Sub-processors page.
| Cookie | Set by | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics 4 | Holds a randomly generated identifier so that repeat visits are counted as one visitor rather than several. It carries no name, email address, or SurgeonAI account identifier | 2 years |
| _ga_<container> | Google Analytics 4 | Holds the state of your current visit for our specific Analytics property, whose identifier completes the cookie name | 2 years |
You can withdraw analytics consent at any time from the Cookie settings link in the website footer. When you do, we switch measurement off for your browser immediately and expire the two cookies above; you can also clear them through your browser’s site-data controls.
SurgeonAI sets no marketing cookies and uses no advertising pixels, and we do not combine what Google Analytics measures with your account or your learning data.
We will update this inventory when our technology changes. For general privacy information, see our Privacy Notice.