Last updated 2026-09-06
Cookie Policy
We set one cookie. It keeps you signed in and nothing else. There are no analytics, advertising or third-party tracking cookies, which is why you have not been shown a consent banner: under PECR, strictly necessary cookies do not require consent.
The one cookie
- Name: oc_session
- Purpose: keeps you signed in after you log in.
- Contents: a signed token with an expiry. It contains no personal data.
- Lifetime: 14 days, or until you sign out.
- Type: strictly necessary. The application cannot work without it.
- Flags: HttpOnly, Secure and SameSite=Lax, so it cannot be read by scripts or sent from another site.
Why there is no banner
The Privacy and Electronic Communications Regulations require consent for cookies that are not strictly necessary. Ours is strictly necessary: without it you cannot stay signed in.
We set no analytics, advertising or third-party cookies at all, so there is nothing to consent to. If that changes we will add a consent mechanism before setting anything, not afterwards.
Turning it off
You can block or delete cookies in your browser. Blocking this one means you cannot sign in, since there is no other way for the application to remember that you have.