Privacy
Cookie Policy
Last updated: October 2026
This policy lists the cookies and browser storage Porto MD uses on portomd.com and in the Porto MD portals, what each one is for, and how long it lasts. A cookie is a small file a website keeps in your browser; browser storage works the same way but stays on your device.
Your choice
The first time you visit, our cookie banner asks whether to allow optional analytics and advertising tools. Nothing optional loads until you choose “Accept,” and “Decline non-essential” keeps it off. If your browser sends a Global Privacy Control signal, we treat it as “Decline non-essential” and do not ask. You can change your mind at any time:
Essential
These are needed to sign you in, keep your account secure and check out. They are set without asking, and they are never used for advertising.
| Name | What it does | How long |
|---|---|---|
| pmd_adminCookie | Keeps you signed in to the clinic, representative, supplier or team portal. | Up to 7 days; team accounts are signed out sooner when idle |
| pmd_mfaCookie | Holds a sign-in open while you enter your two-step code. | 10 minutes |
| pmd_cmfaCookie | Records that you completed two-step verification before opening patient records. | 12 hours |
| pmd_patientCookie | Keeps a patient signed in to their clinic's patient portal. | Up to 30 days |
| pmd_cmCookie | Keeps a member signed in to Porto MD's members' area. | Up to 30 days |
| pmd_age_state, pmd_age21Cookie | Remembers that you confirmed you meet a product's age requirement. | 30 days |
| qbo_oauth_stateCookie | A one-time security check while a Porto MD administrator connects QuickBooks. | 10 minutes |
| pmd_cal_state_google, pmd_cal_state_microsoftCookie | A one-time security check while you connect your Google or Microsoft calendar. | 10 minutes |
| Sign-in session (sb-…-auth-token)Browser storage | Your signed-in session with our authentication provider. | Until you sign out |
| pmd-consentBrowser storage | Remembers your cookie choice, so we do not ask on every page. | Until you change it or clear your browser |
| CartBrowser storage | The products and quantities in your cart. No personal details. | Until you check out or clear it |
Functional
These remember a choice you made so the site works the way you left it. They stay with Porto MD and are never shared.
| Name | What it does | How long |
|---|---|---|
| pmd_app_tokenBrowser storage | Lets you finish an application to join Porto MD across several steps. | Until the application is sent |
| Portal preferencesBrowser storage | Which screen you had open, light or dark mode, and cards you dismissed. | Until you clear your browser |
| pmd_visit_*Browser storage | Stops one visit to a practitioner's storefront being counted twice. Counted by Porto MD only. | Until you close the tab |
Optional analytics and advertising
Used only on our public website pages, and only after you choose “Accept.” They never run on sign-in pages, in the portals, on practitioners’ storefronts, or on patient pages such as booking, telehealth, consent, intake or payment. Google and Meta also never run on the marketplace’s shop and product pages or on our behavioral health, men’s health, women’s health and weight management pages. We never send them health information.
- Vercel Web Analytics (Vercel, analytics): Counts visits to our public pages without setting cookies, so we can see which pages are useful.
- Google Tag Manager and Google Analytics (Google, advertising): Measures visits to our public pages and whether our advertising led to them. Google Analytics sets _ga cookies (up to 2 years); Google advertising tags, if used, may set _gcl_au (90 days).
- Meta Pixel (Meta, advertising): Tells Meta which of our public pages were visited, so we can measure and target our Facebook and Instagram ads. Sets the _fbp cookie (90 days).
Changes and contact
When we add a tool that needs your consent, we update this list and ask everyone again. Questions? Email privacy@portomd.com.