Legal
Cookie policy
Structure and current practice. This needs legal review before launch.
What this site sets today
One cookie, and only for administrators:
- Admin session — set when a member of the team signs in to the review queue. It holds a signed expiry timestamp and a random id, nothing else. It is HttpOnly, so page scripts cannot read it, and it expires after eight hours.
What this site does not set
No advertising cookies, no third-party analytics, no cross-site tracking, and no cookies at all for ordinary visitors browsing the directory. There is no consent banner because there is currently nothing to consent to.
If that changes
Placeholder
Introducing analytics, embedded maps from a third-party provider, or visitor accounts will each set cookies. Any of those requires this page to be updated and a consent mechanism added before the change ships.