Cookie Policy

Last updated: 20 April 2026

This Cookie Policy explains how ARRC Health Ltd ("ARRC", "we", "us") uses cookies and similar technologies on the ARRC website at arrc.health and the ARRC web application. It should be read alongside our Privacy Policy.

1. What are cookies?

Cookies are small text files that a website places on your device when you visit it. They allow the site to remember your actions and preferences (such as being logged in) over a period of time. Similar technologies — including local storage, session storage, and authentication tokens — are covered by this policy where they perform similar functions.

2. The cookies we use

ARRC currently uses only strictly necessary cookies and similar technologies. These are essential for the Service to work — for example, to keep you signed in and to keep your session secure. Under regulation 6(4) of the Privacy and Electronic Communications Regulations 2003 ("PECR"), strictly necessary cookies do not require your consent, but we still want to be transparent about what we set and why.

Cookie / token 1: Supabase authentication tokens (e.g. sb-access-token, sb-refresh-token)

  • Set by: Supabase (our authentication provider)

  • Purpose: Keep you signed in to your ARRC Account between page loads and across devices.

  • Duration: Session and up to 7 days

Cookie / token 2: Hosting and security cookies

  • Set by: Vercel (our hosting provider)

  • Purpose: Route requests, balance load, and protect the Service against attack.

  • Duration: Session

Cookie / token 3: Consent and preference state

  • Set by: ARRC

  • Purpose: Remember choices you have made about the Service (for example, that you have agreed to the latest version of our Terms).

  • Duration: Up to 12 months

3. Cookies we do not use

ARRC does not currently use:

  • Analytics or measurement cookies (Google Analytics, Vercel Web Analytics, Plausible, PostHog or similar);

  • Advertising or marketing cookies;

  • Third-party tracking or social-media cookies;

  • Session-replay or behavioural-recording tools.

If we introduce any non-essential cookies in future, we will update this policy and ask for your consent through a cookie banner before any non-essential cookie is set. You will be able to accept or reject non-essential cookies on equal terms, and change your mind at any time.

4. How to control cookies in your browser

You can block or delete cookies through your browser settings. Note that if you block strictly necessary cookies you will not be able to sign in to ARRC or use core features of the Service. Browser-specific instructions are available at:

You can also use aboutcookies.org for general guidance.

5. Changes to this policy

We may update this Cookie Policy from time to time, including when we add or remove tools that use cookies. The "Last updated" date at the top always reflects the latest revision. Material changes — including the introduction of any non-essential cookies — will trigger a refreshed consent prompt before they take effect.

6. Contact

If you have any questions about this policy, contact:

ARRC Health Ltd
privacy@arrc.health