Draft for committee review — see BACKLOG.md
Cookie notice
Last reviewed: June 2026
The short version
We keep cookies to a minimum. We use a small number of essential cookies to keep you signed in, plus privacy-friendly analytics that do not identify individuals and do not place advertising cookies. That's it.
Essential cookies
These cookies are necessary for the website to function. They cannot be switched off without also breaking your ability to sign in or stay signed in.
| Cookie | Purpose | Expires |
|---|---|---|
| authjs.session-token __Secure-authjs.session-token | Keeps you signed in between page loads. Set by Auth.js, our sign-in system. Over HTTPS — which is everywhere you'll meet it — the name carries the __Secure- prefix. | 30 days |
| authjs.csrf-token | Protects sign-in forms against cross-site request forgery. Not used for tracking. | Session |
| nhws-cookie-ack | Remembers that you have dismissed our cookie notice, so we don't keep showing it. Stored in your browser's local storage, not as a cookie. | Persistent |
Analytics
We don't run any analytics on this site at the moment. If the committee adds one it'll be a privacy-friendly tool (Plausible or Umami — both cookie-light and self-hostable) that counts page views and approximate visitor numbers without:
- placing advertising or tracking cookies;
- building profiles of individual visitors;
- sharing data with advertising networks;
- sending your data to the United States or outside the UK/EEA.
No personal data is sent to the analytics service. You are counted as an anonymous visit, not as a tracked individual.
No advertising or third-party tracking
We do not use advertising cookies, retargeting pixels, social-media tracking buttons, or any other third-party tracking technology. No data about your visit to this site is shared with advertisers.
How to control or delete cookies
All modern browsers let you view, block and delete cookies. Some useful links:
If you block the essential sign-in cookies, you will not be able to access your member account.
More information
For details on how we handle your personal data more broadly, see our privacy policy.