Cookie Policy & Tracking Disclosure
Transparent information regarding how cookies, web beacons, and local storage technologies are utilized across www.medinexusbilling.com, featuring zero Protected Health Information (PHI) storage.
MediNexus Cookie & Tracking Disclosure v3.4
1. Overview & Statutory Background
This Cookie Policy explains how RMI BPO LLC d/b/a MediNexus Billing ("MediNexus," "we," "our," or "us") uses cookies, local web storage, pixel tags, and related telemetry technologies across our website at www.medinexusbilling.com.
Because we provide specialized healthcare revenue cycle management and medical billing services to covered healthcare entities, our digital properties operate under heightened regulatory scrutiny, including the federal Health Insurance Portability and Accountability Act (HIPAA), guidance from the U.S. Department of Health and Human Services (HHS) Office for Civil Rights (OCR), and applicable state consumer privacy statutes (such as the California Consumer Privacy Act and California Privacy Rights Act).
2. Technical Definition: Cookies, Web Storage & Telemetry
Modern web applications utilize several client-side data storage mechanisms to maintain session state, optimize loading speeds, and preserve security parameters:
Small text files (typically key-value strings) placed on your computer or mobile device by a web server. Cookies may be "session cookies" (purged upon closing your browser) or "persistent cookies" (retained until an explicit expiration date).
Standardized browser storage mechanisms (LocalStorage and SessionStorage) capable of caching interface theme preferences and form drafting states directly within the client browser without sending data in HTTP headers.
Unique, cryptographically pseudo-random strings validated on form submission to prevent Cross-Site Request Forgery attacks against medical practice inquiry endpoints.
Ephemeral network connection records maintained at the cloud CDN layer to monitor round-trip latency, edge cache hit rates, and block malicious automated bot traffic.
3. HHS OCR Tracking Technologies Guidance & Zero PHI Rule
In December 2022 and March 2024, the HHS Office for Civil Rights clarified that HIPAA rules restrict covered entities and business associates from deploying online tracking technologies (pixels, tags, cookies) that transmit an individual's IP address or device identifiers in combination with health-related webpage visits or healthcare search queries without express HIPAA authorization or a valid BAA.
MediNexus Billing strictly enforces the following tracking controls:
- Absolute Exclusion of Patient Identifiers: We never store patient names, medical record numbers (MRNs), diagnostic codes (ICD-10), procedure codes (CPT), insurance subscriber IDs, or clinical records in any cookie, token, or local storage element.
- No Third-Party Retargeting Pixels: We do not deploy Meta Pixel (Facebook), TikTok Pixel, LinkedIn Insight Tags, or commercial consumer ad trackers on any audit calculation tool, consultation request form, or client administrative portal.
- Strict Provider-Facing Focus: Our website does not host patient appointment scheduling or patient health portals. Forms on www.medinexusbilling.com collect solely B2B practice administration details from medical providers.
4. Granular Cookie Classifications
We group cookies utilized on www.medinexusbilling.com into four transparent operational tiers:
Tier 1: Strictly Necessary / Essential Security Cookies
MandatoryThese cookies are required for basic site routing, TLS cryptographic session maintenance, DDoS prevention, cross-site request forgery protection, and server load balancing. Because the site cannot function securely without them, these cannot be disabled.
Tier 2: Performance & Analytical Cookies
ConfigurableThese cookies aggregate anonymous visit telemetry to measure server response speeds, detect broken navigation links, and monitor Core Web Vitals. All analytical metrics are anonymized and cannot be used to isolate individual practice identities.
Tier 3: Functional & Preference Cookies
ConfigurableThese cookies allow our website to remember choices you make (such as your preferred medical specialty filter, practice size tier, or dismissing informational banner announcements).
Tier 4: Commercial Campaign Attribution Cookies
OptionalThese cookies measure the high-level effectiveness of our professional healthcare marketing campaigns across search engines. They do not track your browsing activity across unrelated consumer websites and contain zero clinical health data.
5. Comprehensive Cookie Inventory Table
The following table enumerates all cookies currently deployed across www.medinexusbilling.com:
| Cookie Name | Provider | Category | Purpose | Duration |
|---|---|---|---|---|
| __Host-mn_session | MediNexus | Strictly Necessary | Cryptographically secure session token for navigating audit workflows and verifying TLS state. | Session (browser close) |
| __mn_csrf | MediNexus | Strictly Necessary | Anti-CSRF verification token protecting form submissions against cross-site exploitation. | 24 Hours |
| __cf_bm | Cloudflare | Strictly Necessary | Edge cloud bot management cookie used to distinguish human visitors from malicious automated crawlers. | 30 Minutes |
| _ga | Google Analytics (4) | Performance | Anonymized user identifier with IP masking enabled to compute aggregate page views and route latency. | 13 Months |
| _ga_* | Google Analytics (4) | Performance | Preserves session telemetry state across multiple pages during a single visit. | 13 Months |
| mn_cookie_consent | MediNexus | Functional | Stores the user's explicit cookie banner preferences and opt-out status. | 12 Months |
| mn_calc_state | MediNexus | Functional | Temporarily saves multi-step billing audit form inputs so navigation does not lose entered provider counts. | Session |
6. Edge Cloud Infrastructure Cookies
To ensure 99.99% availability, rapid page rendering, and proactive defense against distributed denial-of-service (DDoS) threats, www.medinexusbilling.com utilizes enterprise edge distribution networks.
These edge services place ephemeral, non-tracking operational cookies (e.g., Cloudflare __cf_bm and load-balancer route affinity headers) that analyze network packet characteristics solely to detect abnormal traffic surges, rate-limit malicious scanning, and route requests to the nearest continental United States edge node. These operational headers do not correlate browsing sessions with identifiable individuals.
7. HTML5 Local Storage & Cache Telemetry
In addition to standard cookies, our web application leverages browser-based HTML5 localStorage and sessionStorage for client-side state optimization:
- Interface Rendering State: Caching static CSS styling assets, SVG icon representations, and typography files to accelerate sub-second route transitions.
- Form State Recovery: Retaining non-PHI practice specialty selections during multi-step billing evaluation questionnaires.
- No Persistent Tracking: Local storage items are isolated strictly to our origin domain and cannot be accessed by external websites or cross-site tracking scripts.
8. Global Privacy Control (GPC) & Do-Not-Track (DNT) Signals
MediNexus Billing proudly honors the Global Privacy Control (GPC) browser signal. When our web application detects an active GPC header transmitted by your browser or privacy extension:
- All optional commercial and analytical cookies are automatically blocked or restricted to strict anonymized server telemetry.
- Your visit is registered under our statutory "Do Not Sell or Share My Information" opt-out framework without requiring manual banner interaction.
- No cross-context marketing data is collected or retained.
9. Browser-Specific Cookie Controls
Most modern desktop and mobile browsers grant you full administrative control over stored cookies. You may configure your browser to reject all cookies, accept only first-party cookies, or purge cookies upon closing each session:
Navigate to Settings → Privacy and security → Third-party cookies → Block third-party cookies or customize allowed domains.
Navigate to Preferences → Privacy → Check "Prevent cross-site tracking" and "Block all cookies."
Navigate to Settings → Privacy & Security → Enhanced Tracking Protection → Select "Strict" mode.
Navigate to Settings → Cookies and site permissions → Manage and delete cookies and site data.
Note: Disabling strictly necessary cookies may prevent secure audit form submissions and interactive calculation tools from functioning properly.
10. Commercial Opt-Out Mechanisms
If you prefer to opt out of interest-based commercial marketing across the broader web, you can utilize the self-regulatory industry opt-out portals:
- Network Advertising Initiative (NAI): https://optout.networkadvertising.org/
- Digital Advertising Alliance (DAA): https://optout.aboutads.info/
- European Interactive Digital Advertising Alliance (EDAA): https://www.youronlinechoices.eu/
11. Annual Audit & Revision Protocols
MediNexus Billing conducts quarterly technological scans and an annual formal audit of all scripts, cookies, tag managers, and CDN configurations deployed across our web properties.
Any updates to our cookie inventory, regulatory tracking practices, or statutory compliance frameworks will be reflected immediately in this document with an updated revision date.
12. Data Protection Officer Contact
For inquiries regarding our cookie deployments, telemetry practices, or tracking compliance protocols under HIPAA and state privacy laws, please contact our Privacy Office:
RMI BPO LLC d/b/a MediNexus Billing
Cookie Governance & Web Security Team