Cookie policy

Strictly necessary

These are always on because the site needs them to operate and remember your cookie choices.

• mx_consent_v1: stores your cookie and tracking choices for about 6 months. Provider: Medexia.

Functional

Optional. Used to remember non-essential preferences and preserve a referral-code journey across marketing-site pages where needed.

• mx_referral: stores referral-code continuity for up to 90 days when functional storage is allowed. Provider: Medexia.

Analytics

Optional. Used for first-party landing events and source/campaign measurement so we can understand which pages help GP trainees.

• mx_visitor_id and mx_session_id: anonymous site and session identifiers, up to 90 days for visitor ID and 12 hours for session ID.
• mx_first_touch, mx_last_touch, and mx_offer_context: source, campaign, page, and offer context, up to 90 days.
• Vercel Analytics: only rendered after analytics consent.

Marketing

Optional marketing measurement is used only after marketing consent and when the relevant environment variables are configured. A first-party denial marker may also be set when Marketing is switched off so an earlier Meta or Reddit handoff stays revoked.

• Meta Pixel: campaign measurement and retargeting. Provider: Meta.
• Google tag, GA4, and Google Ads: ad measurement and retargeting. Provider: Google.
• Reddit Pixel: campaign measurement and retargeting. Provider: Reddit.
• gclid, gbraid, wbraid, fbclid, ttclid, msclkid, rdt_cid: ad click IDs handled only after marketing consent.
• mx_meta_capi_seed: a secure, HttpOnly server-random browser seed retained for up to 183 days so Meta or Reddit consent handoffs cannot be reproduced in another browser. Provider: Medexia.
• mx_meta_capi_session (including withdrawal-scoped suffixed names): a secure, HttpOnly browser-session binding used for up to 24 hours to prevent consented Meta or Reddit conversion handoffs from being replayed in another browser. Provider: Medexia.
• mx_meta_capi_revoked: a denial-only marker retained for up to 183 days with your consent choice so the app can reject an earlier Meta or Reddit handoff after Marketing is switched off. Provider: Medexia.
• mx_meta_capi_revocation_ack (withdrawal-scoped suffixed names): a secure, HttpOnly acknowledgement retained for up to 183 days so an older proof response cannot erase a newer withdrawal after an explicit regrant. Provider: Medexia.
• mx_meta_capi_regrant (withdrawal-scoped suffixed names): a secure, HttpOnly token retained for up to 183 days to confirm that Marketing was explicitly enabled after the matching withdrawal. Provider: Medexia.
• mx_meta_capi_client_regrant: a first-party marker retained for up to 183 days so the landing page does not forward marketing identifiers after an app-side withdrawal unless Marketing was explicitly enabled again for that exact withdrawal. Provider: Medexia.

Third-party providers control some cookie durations once their scripts are loaded. We do not send deanery, clinical learning data, question performance, or sensitive app data to ad platforms.