Cookies
The cookies isao.org.uk uses.
isao.org.uk sets only cookies that are strictly necessary for the website to work, so we do not ask for consent to them. We do not use advertising or tracking cookies.
The map on our contact page comes from Google Maps, and Google may set cookies of its own when it loads: see "Map on the contact page" below.
| Cookie | Purpose | How long it lasts |
|---|---|---|
| Form receipt (isao_form_receipt) | Shows your reference number on the confirmation page after you send a form: contact or complaint. It is sent to that confirmation page only. | 1 hour |
| Session (authjs.session-token) | Keeps ISAO staff signed in to the admin console | Until you sign out, and 12 hours at most |
| Sign-in step (isao_pending) | ISAO staff: carries a sign-in from the password to the second step, where you enter the code from your authenticator app or set one up | 5 minutes, or 30 minutes while you set up an authenticator app; each time you ask for more time, the period starts again |
| Authenticator set-up (isao_enrol_resume) | ISAO staff: lets you finish setting up your authenticator app on the same browser if a set-up runs out of time | 72 hours, or until the set-up is finished |
| Known browser (isao_known_browser) | ISAO staff: remembers that you have signed in with this browser, so that you can still sign in from it while sign-in to your account is paused after repeated wrong passwords. It holds no name or email address | 90 days |
| Security (authjs.csrf-token, authjs.callback-url) | ISAO staff: protect the sign-in pages against cross-site request forgery and remember which page to return to after signing in | Until the browser is closed |
Analytics
We count visits with a privacy-friendly analytics service that does not use cookies or collect personal data.
Map on the contact page
The map on our contact page is loaded from Google when you open the page. Google receives your IP address, and may set or read the cookies below on google.com. They are Google's cookies, not ours, and Google decides which of them it uses: a new browser may get none. Google's privacy policy and its page on how Google uses cookies explain them.
| Cookie | What Google uses it for | How long it lasts |
|---|---|---|
| NID or __Secure-ENID | Remembers your preferences in Google services, such as your language | NID: 6 months from your last use of Google; __Secure-ENID: 13 months |
| AEC | Helps Google detect spam, fraud and abuse | 6 months |
| SOCS | Stores your choices about Google's cookies | 13 months |
If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this page.