Data the website currently collects
The order form prepares a message in your browser. When you continue to WhatsApp, the selected product, quantity, name, phone number and comment are passed to that service. This website does not store these form fields on its server. Advertising trackers are not used.
Website statistics
Statistics starts only after you choose “Allow statistics”. Our own server stores aggregate visits, daily unique browsers, page and product views, entry and exit pages, active time and scroll depth, language, device type, browser and operating system, referral domain and campaign tags. It also counts catalogue searches, result counts and result clicks, cart changes, checkout starts and WhatsApp openings. Opening WhatsApp does not confirm a sent message or a purchase. The public counter shows only today’s visits; detailed reports require owner sign-in.
Random daily and session codes are stored in the browser’s local storage. The daily code changes on a new day in Tbilisi time; the session code also changes after 30 minutes of inactivity. Declining statistics deletes these codes. The server keeps temporary codes only as protected hashes for the current day; they are removed on the first write on a following day. Aggregate metrics are retained for 180 days, with expiry also applied on the next write. One browser is not one person; the sum of daily unique browsers over several days is not a count of distinct people.
Order fields, names, phone numbers, addresses, comments, WhatsApp message content, full external URLs and raw IP addresses are not sent to analytics. Catalogue queries are limited to 80 characters; text resembling a phone number, email or URL is redacted. Review search text is not stored. Only cleaned source, medium and campaign tags are retained. Do Not Track or Global Privacy Control disables collection. Previews and administrative pages are excluded. No data is sent to third-party analytics services; the protected dashboard uses an essential sign-in cookie.
The previous statistics module also remains active for compatibility and uses a random code in the tab’s temporary storage. Its server hashes expire after up to two days, with cleanup on the next request; aggregate metrics are retained for 180 days. Previous detailed reports remain accessible to the owner.
Review rankings count an individual review visible for at least three seconds in an active tab, its approximate visible time, and openings of the full review, photos or videos. This does not prove the text was read. Analytics receives the identifier of an already published review, without new personal information about the visitor.
Cookies and your choices
Necessary browser storage supports the cart, protected owner sign-in and remembering your choices. Declining statistics does not prevent browsing the catalogue or placing an order.
The molisan_privacy_v1 cookie stores only “Allow statistics” or “Necessary only” for 180 days, without an individual identifier. The “Cookie settings” button at the bottom of the site lets you change that choice. Visit statistics stays off when Do Not Track or Global Privacy Control is enabled.
Optional audience survey
At the bottom of public pages, you may choose to provide your country of residence, region, age group and gender. Every field is optional; a region can be entered only with a country. You select the country yourself: your country or region is not inferred from an IP address. The survey is separate from purchases and asks for no names, contact details or medical information.
Answers are sent to our own server only when you press “Send answers”. Choosing “Skip” sends no answers. We keep aggregate counts of countries and regions, age groups and gender, rather than a linked individual questionnaire. Regions are grouped with countries; age and gender are not linked to orders, pages, a particular country or a person. Raw IP addresses and contact details are not stored in survey data. When Do Not Track or Global Privacy Control is enabled, the survey is not shown and answers are not sent.
Aggregate survey answers are retained for 180 days in Tbilisi time and are available in the owner’s protected dashboard. After a successful answer, the essential molisan_audience_accepted cookie lasts 180 days; it means only “answer accepted” and contains no individual identifier. An answer or skip is also remembered in this browser’s storage until site data is cleared, so the survey does not repeat.
Technical logs
The hosting server may separately keep technical request logs, including IP addresses, for operation and diagnostics. These logs are separate from the statistics described above.
When you contact MOLISAN
If you choose to email or call a published contact channel, the information you provide is used to respond to your enquiry and for related communication.
Third-party services
When you open WhatsApp, your email application or a phone call, that service’s policies apply. In WhatsApp you review the prepared message and send it yourself. This website has no payment module or medical file uploads.
Your requests
For access, correction or deletion requests relating to direct correspondence, email my@molisan.ge. Whether a request can be fulfilled depends on applicable law and mandatory retention obligations.
Data controller
The data controller for this website is LLC Sana Pharmaceuticals (Georgian legal name: შპს „სანა ფარმაცევტიკსი“).
Last updated: 7 October 2026.