Cookie Policy
Cookies, local storage and third-party services: what is used and how you control it.
Updated 2026-10-19 · v0.9.3
1. Necessary sessions and security
ci_session maintains your login and CSRF protection, normally for up to two hours of inactivity. If you choose “Keep me signed in”, Shield can use the remember cookie for up to 30 days. reCAPTCHA on login and registration can use _GRECAPTCHA and device/network signals for abuse prevention. These are separate from optional Analytics; the relevant provider may set additional security storage.
2. Country preference
NC_COUNTRY remembers your selected active country for up to one year. Changing countries updates this preference. It does not by itself store your exact device location.
3. Optional Google Analytics
Analytics is off until you accept. It is limited to allowed public information pages and excludes private member, administrator, report-entry and case pages. Our configuration removes query strings and referrers from page locations and disables advertising-personalisation features. Google commonly uses _ga and _ga_<container-id>, with default lifetimes up to two years; browser restrictions and property settings can shorten them. We do not send account contact fields as Analytics parameters.
4. Remembering your choice
The localStorage entry notificity-analytics-consent stores accepted or rejected on this browser until changed or site storage is cleared. It is a preference record rather than an Analytics identifier. Cookie preferences lets you accept or reject again. Rejecting after acceptance disables further Analytics and removes accessible _ga cookies; it does not retrospectively erase data already processed by Google.
5. Maps, chat and media
Google Maps on map views can contact Google when loaded, independently of Analytics permission. Postcode lookup sends the query to the relevant mapping or postcode provider. Tawk.to is loaded only when you open live chat and may then use its own cookies or local storage. External media and linked sites have their own notices. Do not put sensitive support details in live chat. Blocking all cookies or these providers in your browser may affect the corresponding functions.
6. Provider information and changes
Read Google’s cookie information, reCAPTCHA FAQ and Tawk.to privacy notice using the links below. Provider cookies can change, so this is a description of configured services rather than a claim to list every browser-specific third-party cookie. Contact the privacy team with questions. Our Privacy Notice explains wider processing and your rights.