Cookies

This site sets one cookie. It is called fh_session, it holds a random identifier for your signed-in session and nothing else, and it is the only reason the site knows who you are as you move from page to page.

It is marked httpOnly, so no script running on the page can read it, and sameSite=lax, so it is not sent when another website links into this one. Over https it is marked secure as well. Signing out deletes it, at your end and at ours.

What we do not set

There is no analytics cookie, no advertising cookie, and nothing belonging to a third party. Nothing here counts which pages you open or how long you spend on them, and no other company is given a way to. The site keeps nothing else in your browser either — no local storage, no session storage, no fingerprinting.

Why there is nothing to click

A cookie that is strictly necessary to provide a service you asked for is exempt from consent under the Privacy and Electronic Communications Regulations. Consent is required for the cookies that follow people around, and this site sets none of them — so a banner here would be asking you to agree to something that is not happening. If that ever changes, this page changes with it and the banner arrives at the same time.

The rest of it

What happens to the documents you upload, where your records are kept and who can technically read them is a bigger question than cookies, and it is answered in full here.