Cookie Policy
Last updated 20 September 2026. Available in English only.
This site uses a small number of cookies. The ones needed to make it work at all are always on. Analytics cookies are off until you say otherwise, and you can change your mind here at any time.
Your current choice
Not answered yet You have not made a choice, so analytics cookies are switched off.
Strictly necessary cookies
These make the site function. They cannot be switched off, and under the ePrivacy rules they do not require consent — without them you could not sign in or submit a form safely.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
.AspNetCore.Identity.Application |
This site | Keeps you signed in | Session, or up to 14 days if you chose “remember me” |
.AspNetCore.Antiforgery.* |
This site | Protects forms against cross-site request forgery | Session |
uht_consent |
This site | Remembers the choice you made on this page, so we stop asking | 365 days |
.AspNetCore.Correlation.*, .AspNetCore.External |
This site | Completes a Google sign-in securely; discarded straight after | A few minutes |
__cf_bm, cf_clearance |
Cloudflare | Bot detection and the Turnstile challenge on our forms | 30 minutes to 1 year |
Analytics cookies — only with your consent
We use Google Analytics to count page views and see which parts of the site people actually use. It runs in Consent Mode with storage denied by default: until you accept, it sets no cookies and sends no identifiers. Google Analytics 4 does not log or store full IP addresses, and we have not turned on advertising features, remarketing, or Google Signals for this property.
| Cookie | Set by | Purpose | Lifetime |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes one browser from another | 2 years |
_ga_* |
Google Analytics | Maintains the analytics session state | 2 years |
Things stored in your browser that are not cookies
A few preferences are kept in your browser’s local storage rather than in a cookie. They never leave your device and are never sent to us: your light or dark theme choice, and whether you have dismissed a particular tip or announcement. Clearing your site data removes them.
Third-party requests
Some assets are loaded directly by your browser from other providers — front-end libraries from jsDelivr and unpkg, country flags from flagcdn.com, and map tiles from OpenStreetMap. These do not set cookies for us, but the provider necessarily sees your IP address in order to serve the file. They are listed in our Privacy Policy and on the Attribution page.
Controlling cookies in your browser
Besides the control at the top of this page, every browser lets you block or delete cookies in its settings. Blocking strictly necessary cookies will stop you signing in and may break forms. Most browsers also send a “Global Privacy Control” signal if you enable it; we treat that as a refusal of analytics cookies.
Changes
If we add a cookie that needs consent, or materially change how the existing ones work, we will ask you again rather than assume your previous answer still applies.