Cookie policy

Public pages

Browsing the public website, Public Register, standards and resources does not require advertising, profiling or non-essential analytics cookies. Language selection is represented in the page URL rather than stored in a preference cookie.

Strictly necessary cookies

The restricted administration area uses Auth.js cookies needed to protect the sign-in flow, prevent cross-site request forgery, return an authorised user to the intended page and maintain an authenticated session.

Cookie names may use a secure prefix in production. They include a session token and short-lived security or callback values. They are not used for advertising or cross-site profiling.

Duration

The authenticated administration session has a maximum duration of eight hours. Security and callback cookies are session-based or retained only for the short period needed to complete the relevant authentication step.

Infrastructure services

Vercel hosts and delivers the website. Neon database processing and Resend transactional email operate server-side and do not place advertising or analytics cookies in a visitor's browser through Certiqual.

Browser choices and policy changes

Users may remove or block cookies through their browser settings, although blocking strictly necessary cookies will prevent administration sign-in from working correctly.

If non-essential cookies are introduced, this policy and the relevant consent controls will be updated before those technologies are enabled.