Cookie Policy

The five technical cookies this site sets and what your browser stores. No analytics, no advertising and no third-party cookies.

Document version: 2026-01-v1

The short version

This site uses no advertising cookies, no analytics cookies and no third-party cookies. The only cookies it sets are technical ones: keeping your session, protecting the sign-in process and limiting automated use of the catalogue. That is why you will not see a banner asking for permission: there is nothing to ask permission for.

Nor is any resource loaded from another domain: fonts, images and code are all served from medlinecare.co.

The cookies we set

medline_vitrina · 2 hours: A random identifier, with no data inside, used to count how many medicine pages and pharmacy storefronts you have viewed without an account. It supports the free browsing allowance.
medline_oauth · 10 minutes: The security parameters of the Google sign-in flow and the page to return to when it finishes. Deleted as soon as the process ends.
medline_google_pendiente · 10 minutes: The identity returned by Google — e-mail and name — while you finish completing registration with your identity document. It is signed and expires on its own.
medline_sesion · 60 seconds: The one-time handover of the newly opened session until the page picks it up. It lives for one minute and is then deleted.
__Host-medline_enlace · 10 minutes: A random value that ties the sign-in process to this browser, so that no one can complete it from another. It contains no information about you.

What is stored in your browser and is not a cookie

These keys live in browser storage and do not travel to the server with every request. Those marked "until you clear it" survive closing the tab; the rest disappear when you close it.

web.carrito · until you clear it: What is in your cart: which product and how many. No prices.
web.favoritos · until you clear it: The medicines you starred. It lives only in this browser and is not uploaded to your account.
web.tema · until you clear it: Whether you prefer the light or dark page.
medline.cupon-registro.cerrado · until you clear it: That you already dismissed the sign-up coupon notice, so it is not shown again.
web.sesion · until you close the tab: Your signed-in session: temporary credentials and basic account data. It is lost when you close the tab, which is what we want for a health session on a shared computer.
web.pin · until you close the tab: Your location, only if you granted permission, in order to find nearby pharmacies. If you deny it, that refusal is stored (web.pin.negado) so you are not asked again in this session.
web.direccion and web.donde · until you close the tab: The delivery address you chose — only its label, without coordinates — and the city where you want to receive your order.
web.medio-de-pago · until you close the tab: Which payment method you left selected. No amounts and no card data: nothing about your card is stored here.
web.prelanzamiento.visto and web.asistente.asomo.callado · until you close the tab: Which notices you already dismissed, so they do not reappear while you browse.

Your IP address

It is not a cookie, but it is stored and so it is disclosed. When serving the public catalogue we count how many requests arrive from each IP address in the last hour, in order to curb automated use. That count lives only in the server’s memory, is not written to disk and disappears when the server restarts.

The IP address is retained in two cases, both required by Law 1581: alongside the authorization you grant, so that it can be proven from where and when you gave it, and in the audit log of every access to clinical information.

How to clear them