Cookies
Cookies and consent
Nothing non-essential runs before you say so. Consent is granular, withdrawable at any time, and recorded with a timestamp and policy version.
| Category | Default |
|---|---|
| Strictly necessarySession integrity, consent record, CSRF protection, load balancing. No profiling, no third-party transfer. | Always on — cannot be disabled |
| AnalyticsAggregate measurement with IP truncation, no cross-site identifiers and no advertising signals. Nothing loads before consent. | Off until you choose it |
| MediaVideo is click-to-load. Nothing is requested from a video host until you press play, so no third-party cookie is set by browsing. | Off until you choose it |
| PreferencesRemembers language, region and accessibility choices such as reduced motion or read-aloud. | Off until you choose it |
What changes against the current site
At Stage 0, analytics and three separate session-replay tools were observed loading on the live site before any consent decision, including on the portal login page, while the consent banner itself was present but not enforcing. The proposed platform blocks every non-essential tag until an explicit opt-in exists, records the decision locally with a policy version, and re-asks when the policy changes.
ProvenanceFindings are from the read-only Stage 0 crawl on 21 August 2026. Retention periods and the final analytics product are subject to the Authority’s DPO decision.