Legal

Cookie notice

The few cookies this website uses, what each one does, and how to change your choice about analytics.

Last reviewed

What cookies are

A cookie is a small text file that a website asks your browser to keep, so that the site can recognise the same browser from one page to the next. Websites can also keep small pieces of information in your browser's own storage, called local storage. This notice covers both.

This website uses as few cookies as it can. There are no advertising or marketing cookies, and nothing on this site tracks you across other websites.

Strictly necessary cookies

These cookies are needed for the website to work and are set without asking, as the law allows. They cannot be switched off individually, but you can block or delete all cookies in your browser settings; if you do, the forms and the admin sign-in will not work.

  • Session cookie — keeps you on the same session between pages so that a form you are filling in remembers what you entered if something needs correcting, and so that our team can sign in to the admin area. It holds a random reference only, not your details, and expires when you close your browser or after a period of inactivity.
  • CSRF token — protects the forms and the admin area against a type of attack in which another website tries to submit a form on your behalf. It holds a random value and nothing about you.

Your consent choice

If analytics is set up in a way that needs consent, the website shows you a short message asking whether you agree to analytics cookies. Your answer is kept in your browser's local storage under the name dd-consent, so that we do not ask you again on every visit. It records only "granted" or "denied". It is not a cookie and is never sent to us or to anyone else.

Analytics cookies

We may use an analytics service to understand how the website is used — for example which pages are read most and whether the forms are easy to complete — so that we can improve it.

Analytics cookies are set only if both of the following are true:

  • we have enabled an analytics provider that uses cookies, and
  • you have agreed to analytics cookies through the message described above.

Until you agree, no analytics cookie is set and no analytics data is sent. If we use a provider that works without cookies and does not identify individual visitors, no consent message is shown, because nothing is stored on your device.

The cookies this website may set

NameTypePurposeHow long it lasts
Session cookie (its name ends in "-session")Strictly necessaryKeeps your form entries and, for our team, the admin sign-in between pages.Until you close your browser, or after a period of inactivity.
XSRF-TOKENStrictly necessaryProtects forms and the admin area against cross-site request forgery.Until you close your browser, or after a period of inactivity.
dd-consentLocal storage (not a cookie)Remembers whether you granted or denied analytics cookies.Until you clear your browser's site data or change your choice.
Analytics cookiesOptional, only with consentSet by the analytics provider, if one that uses cookies is enabled, to tell one visitor's pages apart from another's. They hold a random identifier, not your name or contact details.Set by the provider; typically up to two years.

How to withdraw consent

You can change your mind at any time:

  1. Clear this website's site data in your browser settings. This removes the stored choice, and the consent message will appear again on your next visit, where you can choose "deny".
  2. Delete any analytics cookies for this website in the same settings screen, so that the provider's identifier is removed as well.

Every common browser lets you see and delete the cookies and site data a website has stored, usually under privacy or site settings. Your browser's help pages explain where to find them.

Withdrawing consent does not affect anything you have already sent us through a form. For how we use that information, see our privacy notice.

Changes to this notice

If we add, remove or change a cookie, we update this page and the date under the heading. If we begin using a provider that needs consent, you will be asked before any such cookie is set.