1. What cookies are
Cookies are small data files stored or read by a web browser when a user visits a website.
They can serve different purposes, including:
- maintaining an authenticated session,
- security,
- storing preferences,
- functional support,
- analytics,
- advertising or marketing.
Not all cookies are used for tracking.
In NursEscape, the currently documented cookie use relates to a cookie required for authenticated session operation.
2. Cookie currently used
nursescape_session
Provider / Domain: NursEscape / first-party
Category: Strictly necessary
Purpose: Maintains the authenticated session and supports secure platform operation after sign-in.
Security attributes:
SecureHttpOnlySameSite=Lax
Accessible from JavaScript: No, because of HttpOnly.
Used for advertising/marketing: No.
Used for third-party analytics: No.
Duration: Session cookie (no persistent Max-Age/Expires). The server-side session has a 2-hour absolute lifetime and a 1-hour idle timeout.
3. Why the session cookie is necessary
The authenticated platform must be able to recognize that a user has signed in successfully and associate subsequent permitted requests with the active session.
Without the session cookie, core authenticated functionality cannot operate correctly.
Examples include:
- access to learner assignments,
- access to instructor tools,
- session continuity,
- role-based access,
- account-specific platform interactions.
The cookie is therefore functionally necessary for providing the authenticated service.
4. Technologies not currently identified
Based on the current application source, the following have not been identified:
- Google Analytics,
- Matomo,
- Google Tag Manager,
- Google Ads,
- Meta / Facebook Pixel,
- Microsoft Clarity,
- Hotjar,
- reCAPTCHA,
- TikTok Pixel,
- LinkedIn Insight Tag,
- embedded YouTube,
- embedded Vimeo,
- remote Google Fonts,
- third-party advertising cookies.
5. Public website and authenticated platform
Cookie behaviour may differ between:
Public pages
Pages such as:
- Home,
- About,
- How It Works,
- Educational Approach,
- For Institutions,
- Research & Innovation,
- H.I.L.,
- Contact,
- legal pages.
Based on the current information, these do not require analytics/marketing cookies.
Authenticated platform
After sign-in, nursescape_session is used to maintain the authenticated session.
6. Local storage, session storage and similar technologies
Cookies are not the only way a browser can store data.
Web applications may also use:
localStorage,sessionStorage,- IndexedDB,
- Cache Storage,
- other browser-storage mechanisms.
7. Independent Room Packages
Digital rooms run as independent frontend applications inside a sandboxed iframe.
NursEscape is designed so that rooms do not receive access to:
- NursEscape cookies,
- the application session,
- the parent DOM,
- internal application endpoints.
Communication takes place through the NursEscape JavaScript SDK.
8. Third-party embedded content
The current public application has not been identified as embedding:
- YouTube,
- Vimeo,
- social-media widgets,
- third-party analytics dashboards,
- third-party chat tools,
- advertising content.
Simple external links do not themselves mean that NursEscape embeds third-party tracking.
Once a visitor follows an external link, the third party's own privacy and cookie practices apply.
9. Maps
The public site may include a link to a map service.
10. Social-media links
The public site may link to official Healthcare Innovation Laboratory social-media accounts.
A normal hyperlink is not the same as a social tracking pixel.
When a visitor goes to a social platform, the privacy and cookie practices of that platform apply.
11. Managing cookies in your browser
Most browsers allow users to:
- view stored cookies,
- delete cookies,
- block selected cookies,
- block third-party cookies,
- clear site data.
Blocking the strictly necessary NursEscape session cookie may prevent sign-in or normal operation of the authenticated platform.
12. CAPTCHA / anti-spam technologies
The current application source has not been identified as using reCAPTCHA or an equivalent third-party CAPTCHA.
13. Fonts and external resources
The current application source has not been identified as loading remote Google Fonts.
14. Cookie table
| Name | Provider | Purpose | Category | Duration | Third-party |
|---|---|---|---|---|---|
nursescape_session |
NursEscape / first-party | Authentication and session continuity | Strictly necessary | No |
15. Changes to this Cookie Policy
This policy may be updated when:
- authentication/session implementation changes,
- a new cookie is introduced,
- browser storage is added,
- analytics are introduced,
- an embedded third-party service is added,
- a service provider changes,
- legal requirements change.
The latest version will be published on this page with an update date and version number.
16. Contact
For questions about this Cookie Policy:
Healthcare Innovation Laboratory Department of Nursing University of Thessaly
Email: hil@uth.gr
For personal-data protection matters:
Data Protection Officer — University of Thessaly
Email: dpo@uth.gr
17. Related policies
- Privacy Policy
- Terms of Use
- Accessibility Statement
- Contact