Cookie Policy

A cookie is a small file a website asks your browser to store. It is sent back with your next request, which is how a site can recognise that you are still signed in.

We use strictly necessary cookies only. Browsing the public pages sets no cookies at all — they appear only once you sign in.

• “session” — set when a student signs in to the student portal. It holds a random sign-in token so the portal knows who you are. It is HttpOnly (unreadable by scripts), SameSite=Lax, sent only over HTTPS in production, and expires after 30 days or when you sign out.
• “admin_session” — the equivalent cookie for staff signing in to the admin panel. It is limited to the /admin area, so it is never sent while you browse the rest of the site. Keeping the two separate means signing out of one area never signs you out of the other.

• No advertising or retargeting cookies.
• No social media tracking pixels.
• No third-party analytics cookies unless analytics is explicitly enabled for this site; when it is not configured, no analytics requests are made at all.

The cookies described above are strictly necessary to provide the sign-in functionality you asked for, so they do not require consent. If we ever add optional cookies, we will ask for your consent first.

You can delete or block cookies in your browser settings at any time. Blocking the session cookies will prevent you from signing in to the student portal or the admin panel; the rest of the website will continue to work normally.

Signing out clears the relevant session cookie and revokes its sign-in token on our server.

If the cookies we use change, we will update this page and the "last updated" date above.