Cookie policy

AcuityRow uses a deliberately small set of cookies. We do not use third-party advertising cookies and we do not track operators or residents across the web.

• Strictly necessary cookies for authentication, session continuity, CSRF protection, and load balancing.
• Preference cookies that remember UI choices like collapsed nav sections.
• Privacy-respecting analytics on the public marketing site only, with IPs truncated and no cross-site tracking.

The operator product uses authentication and CSRF cookies only. No analytics cookies are set inside a signed-in operator session. PHI is never stored in a cookie.

• session — strictly necessary; expires when the browser session ends.
• auth — strictly necessary; encrypted token used to keep operator users signed in across tabs.
• csrf — strictly necessary; protects form submissions.
• prefs — preference; remembers UI choices for the user only.
• analytics — set on the public site if you consent; collects coarse page-view information with truncated IP.

You can clear or block cookies in your browser settings. Blocking strictly necessary cookies will prevent sign-in from working. On the public site, analytics can be declined from the consent prompt without affecting the rest of the site.

We honor Global Privacy Control (GPC) signals on the public site.

Industry has not converged on a Do-Not-Track standard. We treat GPC as the operational equivalent and apply it to analytics on the public site.

We will update the cookie list above when we add or remove cookies. Material changes will be communicated to operator administrators in product.