Skip to main content
Pilot programmeNow setting up pilot hospitals across Nigeria — book a walkthrough
GSHS logoGSHS

Cookies Policy

Last updated: February 2026

Draft — pending legal review. This is a draft policy prepared for review. It has not yet been reviewed by qualified legal counsel and should not be relied upon as final until it has.

What GSHS stores in your browser, why, and how to control it.

  1. 1. What cookies are

    A cookie is a small text file a website stores in your browser. Similar technologies — local storage, session storage and in-browser databases — do much the same job. This policy covers all of them and applies to this website and to the signed-in GSHS platform.

  2. 2. Our approach

    We keep this deliberately minimal. GSHS does not use advertising cookies, does not use cross-site tracking, and does not sell or share browsing data with advertising networks. Nothing we store in your browser contains clinical information in readable form.

  3. 3. Strictly necessary cookies and storage

    These are required for the service to work and cannot be switched off from within the product. They are set only when you use the relevant feature.

    • Session and authentication tokens — keep you signed in as a staff member or a patient, and are cleared when you sign out.
    • Security tokens — protect forms against cross-site request forgery and abuse.
    • Offline registration queue — where a registration clerk loses connectivity, patient registrations are held in the browser's local database until the connection returns, then synchronised and removed. This is the only circumstance in which patient details are held on the device, and it exists so that care is not blocked by a dropped connection.
    • Interface preferences — small items such as whether the sidebar is collapsed, and the colour theme resolved for your organisation, which we keep in browser storage so screens do not flash the wrong colours while loading. This holds colour values and a logo address only, never anything about you.

  4. 4. Analytics

    We may use privacy-respecting, aggregated analytics on the public marketing pages to understand which pages are useful. Any such analytics are configured without cross-site identifiers and are not applied to signed-in clinical screens or to the patient portal. Where analytics requiring consent are introduced, we will ask you first.

  5. 5. Third parties

    Cookies may be set by the infrastructure providers that host and protect the platform, strictly for security, load balancing and abuse prevention. We do not embed advertising networks or social media tracking pixels on this site.

  6. 6. Controlling cookies

    You can delete or block cookies through your browser settings. Blocking strictly necessary cookies will prevent you from signing in, and clearing site data while registrations are queued offline will delete those queued records before they reach the platform — so clinical staff should sync before clearing browser data.

    Public pages, including prescription verification, work without you being signed in and without optional cookies.

  7. 7. Changes and contact

    If we change what we store in your browser, we will update this page and, where the change requires consent, ask for it. Questions can be sent to privacy@gshs.ng.