Cookies and browser storage used on doctravia.com and DOCTRAVIA checkout pages
Effective date: 26 October 2026. Operator: DOCTRAVIA FOR ECOMMERCE W.L.L., CR No. 194877-1, Kingdom of Bahrain.
| Name | Where | Category | Purpose | Storage period |
|---|---|---|---|---|
| doctravia_at | panel.doctravia.com | Essential | Keeps a merchant or administrator signed in (HTTP-only session token, never readable by scripts). | Session cookie — removed on sign-out or when the browser closes. |
| doctravia_rt | panel.doctravia.com | Essential | Renewing the session without re-entering credentials (HTTP-only refresh token, rotated on every use). | Up to 7 days, or until sign-out. |
| doctravia_csrf | panel.doctravia.com | Essential | Protects every state-changing request against cross-site request forgery. | Session cookie. |
| doctravia_cookie_consent | pay.doctravia.com (browser local storage) | Essential | Remembers your cookie-banner choice so the notice is not shown again. | Until you clear site data in the browser. |
| Name | Provider | Category | Purpose | Storage period |
|---|---|---|---|---|
| _GRECAPTCHA and similar Google cookies | Google (reCAPTCHA) | Security | Bot and abuse protection on the payment button of the checkout page. Google may set its own cookies when the reCAPTCHA script loads. | Set and governed by Google; typically up to 6 months. |
| Payment session cookies | Arab Financial Services (AFS hosted checkout) | Essential | Process and secure your card payment on the payment partner’s PCI DSS certified page. Card data never reaches DOCTRAVIA. | For the duration of the checkout session; governed by AFS’s own policy. |
3.1 We do not use advertising, tracking or social-media cookies, and we do not sell data collected through cookies. The payment widget and the landing set no analytics cookies; the only storage listed above is required for the operation and security of the websites.
3.2 Blocking the essential entries in the table above may prevent sign-in or payment from working. You can clear them at any time through your browser settings.