Site cookies
Last updated: 29 October 2026
What is a cookie?
A cookie is a small text file that is downloaded onto your device when you visit a website. They are widely used to make websites work, or work more efficiently, as well as to provide information to the owners of the site. This can help in providing an effective website experience and relevant content.
The rules on cookies and similar technologies are covered by the Privacy and Electronic Communications Regulations 2003 (PECR). PECR covers the storing of information, or the gaining of access to information stored, on a user’s device.
Cookie usage
This platform uses cookies to support essential website functions and, where enabled by site owners, embedded services such as video players. Some cookies are set directly by this platform, or by embedded first-party systems we control. Others are set by third-party services embedded within pages, including YouTube/Google and Vimeo.
For third-party services, the exact cookies set may vary depending on factors such as whether you are logged in to that service, whether you have previously visited it, your browser settings, the consent choices you make, and the provider’s own technical configuration.
We group cookies into categories to help you understand why we use them. You can manage your consent preferences via our cookie consent tool or by adjusting your browser preferences.
Updates to this page
This cookie policy may be updated from time to time as functionality on the platform changes, including the introduction of additional services or user features. We will publish any material changes on this page.
1. Necessary cookies
These cookies are essential to enable the website to work correctly. You can only deactivate them by changing your browser preferences.
Cookie banner
| Cookie |
Service |
Purpose |
Duration |
| frescocookiecontrol_grand-union-doctoral-training-partnership |
Platform |
Save cookie preferences |
13 weeks |
Login cookies
If you log in, we set a cookie so that we can remember this fact. This prevents you from having to log in again every time you visit a new page.
| Cookie |
Purpose |
Duration |
| SSESS[random identifier] |
Drupal session identifier - used to distinguish authenticated user sessions and maintain login |
8 hours |
| SimpleSAMLAuthToken |
Token for the current user’s login session |
Until you close your browser |
| SimpleSAMLSessionID |
Identifies the current user session for login stability |
Until you close your browser |
2. Analytics
The platform does not currently set its own analytics cookies. However, embedded third-party video services may set cookies in these categories when video content is embedded or played.
Audio
| Cookie |
Purpose |
Duration |
| _gat_* |
Google Analytics request throttling. |
Variable |
| acast-listenerid |
Unique Acast listener analytics identifier. |
Session |
| cf_clearance |
Cloudflare security/challenge validation. |
Variable |
| jwplayerLocalId |
Local Storage - JW Player user identifier for player analytics. |
Persistent |
DotDigital
| Cookie |
Purpose |
Duration |
| LP-X |
Identifies the contact to ensure that correctly personalized content or pre-filled form fields display to the intended viewer. |
1 month |
| Survey-X |
For surveys and landing pages |
Page lifetime |
| dm-subscriber |
Used in abandoned cart tracking |
? |
| dm_i |
Visitor identification |
365 days |
| recordID |
Anonymous visitor ID |
365 days |
| respondentidX |
For surveys and landing pages |
1 month |
| sessionID |
Session tracking |
20 minutes |
| utm_campaign |
Session tracking from URLs |
? |
| utm_medium |
Session tracking from URLs |
? |
| utm_source |
Session tracking from URLs |
? |
Genially
| Cookie |
Purpose |
Duration |
| Z2VuaWFsbHkuY29t-_lr_hb_-genially-z2e5p%2fgenially |
LogRocket heartbeat cookie used to check activity across browser tabs and determine whether the same recorded session is already active in another tab. |
1 day |
| Z2VuaWFsbHkuY29t-_lr_tabs_-genially-z2e5p%2fgenially |
Used by LogRocket to maintain session-recording information across tabs, prevent duplicate recording sessions and retain conditional recording rules. |
1 day |
| _vwo |
Visual Website Optimizer is used by Genially to support behavioural analysis and experimentation, including retaining information used to provide and measure variations of the user experience. |
365 days |
Google Maps
| Cookie |
Purpose |
Duration |
| _utma |
Legacy Google Analytics visitor identifier |
13 months |
| _utmb |
Session tracking |
30 minutes |
| _utmc |
Session Management |
Session |
| _utmt |
Request throttling |
Variable |
| _utmz |
Session Management |
Variable |
Miro
| Cookie |
Purpose |
Duration |
| MiroRemoteSamplingConfig |
Telemetry sampling and analytics collection control. |
Unknown |
| ajs_anonymous_id |
Segment analytics anonymous visitor identifier. |
1 year |
| rum_session |
Session storage: real user monitoring. |
Session |
Oxford Events
| Cookie |
Purpose |
Duration |
| NRBA_SESSION NRBA_SESSION:<id> |
Local Storage: Performance monitoring Error tracking Telemetry |
Unknown |
Oxford Maps / MazeMaps
| Cookie |
Purpose |
Duration |
| _gat |
Request throttling |
Variable |
| mm_preferences |
Stores map preferences, floot selections, zoom/location settings |
Variable |
SharePoint
| Cookie |
Purpose |
Duration |
| MUID |
Microsoft device/user identifier. |
Persistent |
| ai_session |
Persistent analytics identifier. |
|
| ai_user |
Persistent analytics identifier. |
|
| fpc |
Microsoft telemetry correlation cookie. |
|
Shiny/IDN
| Cookie |
Purpose |
Duration |
| __cf_bm |
Cloudflare bot protection |
Variable |
| _ga |
Distinguishes users |
2 years |
| _gat_gtag_UA_* |
Request throttling for analytics |
1 minute |
| _gid |
Stores pageview/session state |
24 hours |
Spotify
| Cookie |
Purpose |
Duration |
| sp_utm |
Unknown |
~ 2 months |
Timeline.js
| Cookie |
Purpose |
Duration |
| _ga_LVEF* |
Google Analytics 4 session/measurement cookie. |
13 months |
3. Functional
The platform does not currently set its own functional cookies. However, embedded third-party video services may set cookies in these categories when video content is embedded or played.
Airtable
| Cookie |
Purpose |
Duration |
| AWSALBTG |
This cookie is used by Airtable to keep requests routed consistently during the session. |
About 1 week |
| AWSALBTGCORS |
This cookie is used by Airtable to help with load balancing, routing and session stickiness. |
About 1 week |
| __Host-airtable-session |
This cookie is used by Airtable to recognise the browser and keep the session active. |
About 1 year |
| __Host-airtable-session.sig |
This cookie is used by Airtable to recognise the browser and keep the session active. |
About 1 year |
| brw |
This cookie is used by Airtable to store browser or session-state information. |
About 1 year |
| brwConsent |
This cookie is used by Airtable to store consent state information. |
A few hours |
| mv |
This cookie is used by Airtable to store browser or session-state information. |
A few hours |
Audio
| Cookie |
Purpose |
Duration |
| Drupal.olivero.stickyHeaderState |
Local Storage - stores whether the player header is expanded or collapsed. |
Variable |
| cf_clearance |
Cloudflare security/challenge validation. |
Variable |
| cookie-agreed-version |
Stores version of accepted cookie policy. |
Variable |
| geo |
Stores Apple Podcasts region or country preference. |
Session |
DotDigital
| Cookie |
Purpose |
Duration |
| Survey-Started-X |
Records when a user starts or completes a form, tracks whether a pop-up form has been dismissed, or utilizes HTML5 local storage (lpformX) to save user progress so they can return to finish filling out a form later. |
Page lifetime |
| X-Completed |
Records when a user starts or completes a form, tracks whether a pop-up form has been dismissed, or utilizes HTML5 local storage (lpformX) to save user progress so they can return to finish filling out a form later. |
365 days |
| X-Dismissed |
Records when a user starts or completes a form, tracks whether a pop-up form has been dismissed, or utilizes HTML5 local storage (lpformX) to save user progress so they can return to finish filling out a form later. |
? |
| lpformX |
Records when a user starts or completes a form, tracks whether a pop-up form has been dismissed, or utilizes HTML5 local storage (lpformX) to save user progress so they can return to finish filling out a form later. |
? |
| respondentidXcount |
Prevents users from submitting the same embedded form multiple times consecutively or overwriting previous submissions. |
1 month |
Google Maps
| Cookie |
Purpose |
Duration |
| GRECAPTCHA |
Bot detection and abuse prevention |
Several months |
| NID |
Google preference, used for language, interface setting and map preferences |
6 months |
| google.maps.eventPage |
Local Storage: Map state storage |
Variable |
| rc::f:* |
Local Storage – reCAPTCHA anti-bot token |
No built in expiry |
Instagram
| Cookie |
Purpose |
Duration |
| csrftoken |
This cookie helps protect Instagram requests from cross-site request forgery. |
388 days |
| datr |
This cookie is used by Instagram to recognise the browser and support security checks. |
388 days |
| mid |
A cookie used by Instagram to track sessions and measure performance across different domains. |
388 days |
| wd |
This cookie stores the browser window size so Instagram can render content at the right dimensions. |
388 days |
MS Forms
| Cookie |
Purpose |
Duration |
| .AspNetCore.OpenIdConnect.Nonce.* |
Authentication/security nonce |
Session |
| FormsWebSessionId |
Forms session management |
Session |
| Msal.cache.encryption |
Encryption of authentication tokens |
Session |
| Navigation StaticResource |
Cache storage |
Unknown |
| __RequestVerificationToken |
CSRF/security token |
Session |
| msats-telemetry-profile-id msal.version |
Microsoft telemetry/ authentication |
Unknown |
| workbox-expiration |
IndexedDB: Service for caching |
Unknown |
Miro
| Cookie |
Purpose |
Duration |
| ajs_user_id |
User identifier. |
1 year |
| cx-fingerprint |
Local storage: session continuity, fraud prevention and platform operation. |
No built-in expiry |
| lastKnownOrgId |
Last organisation accessed. |
Session |
| lastVisitedStartViewKey |
Local storage: dashboard state and widget identifiers. |
No built-in expiry |
| mr-anon-id-1 |
Anonymous user identifier. |
1 year |
| rb_view-* |
Local storage: UI state and window dimensions. |
No built-in expiry |
| rtb_saved_dashboard |
Local storage: current dashboard state, selected project and recent workspace information. |
No built-in expiry |
| token |
Authentication/security token. |
1 year |
| userLocale |
Language preference. |
Session |
| what-intent |
Session storage: mouse, keyboard or touch interaction intent. |
Session |
Oxford Maps / MazeMaps
| Cookie |
Purpose |
Duration |
| mazemap_session |
Maintains interactive map session state |
Session |
| mm_route |
Stores routing/navigation state |
Session/Persistent |
Panopto
| Cookie |
Purpose |
Duration |
| Panopto.UserSettings[anonymous] |
Local Storage – caption preference |
Variable |
| UserSettings |
Stores player/user settings |
10 - 12 Months |
SharePoint
| Cookie |
Purpose |
Duration |
| MUID |
Microsoft device/user identifier. |
Persistent |
| WSS_FullScreenMode |
Stores SharePoint viewer/display preferences. |
|
Shiny/IDN
| Cookie |
Purpose |
Duration |
| AWSALB |
Load balancer session affinity |
Variable |
| __cf_bm |
Cloudflare bot protection |
Variable |
| rsconnect |
Session persistence |
Variable |
| shinyapps.io |
Maintains active Shiny session state |
Session |
Spotify
| Cookie |
Purpose |
Duration |
| OptanonConsent |
OneTrust to store details on cookie categories and consent given |
1 year |
| sp_landing |
Implement audio content and registers information on user interaction related to the audio content |
1 day |
| sp_t |
Implement audio content and registers information on user interaction related to the audio content |
1 year |
ThingLink
| Cookie |
Purpose |
Duration |
| AWSALBAPP-0 |
This load-balancer cookie keeps the browser routed consistently to the same ThingLink backend application. |
1 week |
| AWSALBAPP-1 |
This load-balancer cookie keeps the browser routed consistently to the same ThingLink backend application. |
1 week |
| AWSALBAPP-2 |
This load-balancer cookie keeps the browser routed consistently to the same ThingLink backend application. |
1 week |
| AWSALBAPP-3 |
This load-balancer cookie keeps the browser routed consistently to the same ThingLink backend application. |
1 week |
| JSESSIONID |
This session cookie maintains the browser's session state with ThingLink. |
Session |
| currency |
This technical session cookie stores the user's selected or default currency ID. |
Session |
4. Marketing
The platform does not currently set its own marketing cookies. However, embedded third-party video services may set cookies in these categories when video content is embedded or played.
Google Maps
| Cookie |
Purpose |
Duration |
| rc::a |
Local Storage – reCAPTCHA state token |
No built in expiry |
Instagram
| Cookie |
Purpose |
Duration |
| ig_did |
This cookie is used by Instagram to tracks visits and optimise marketing functionality for personalised ads and embedded content. |
1 year |
Twitter / X
| Cookie |
Purpose |
Duration |
| __cuid |
This cookie is a tracking and analytics cookie used by Twitter (X) to determine unique visitors and track user behaviour across its platforms |
388 days |
| __gt |
This cookie is a tracking and analytics cookie used by X.com (formerly Twitter) to measure marketing performance across different websites |
Less than 1 day |
| guest_id |
Used by X.com (formerly Twitter) to identify a guest visitor for ads and measurement |
388 days |
| guest_id_ads |
Used by X.com (formerly Twitter) to help with ad-related visitor tracking |
388 days |
| guest_id_marketing |
Used by X.com (formerly Twitter) to help with marketing and ad tracking |
388 days |
| personalization_id |
Used by X.com (formerly Twitter) to help tailor ads and measure engagement |
388 days |
5. Video
Sites on this platform may embed videos from YouTube/Google and Vimeo. These services set cookies to enable the video player to work, track views, and personalise advertising.
Note: If you are logged into a YouTube, Google or Vimeo account, these providers may link your viewing activity on this site to your account. This occurs via cookies already stored in your browser from those services.
SharePoint
| Cookie |
Purpose |
Duration |
| ESTSAUTH |
Microsoft Entra ID authentication token. |
Session |
| ESTSAUTHPERSISTENT |
Persistent Microsoft login state. |
|
| FedAuth |
SharePoint federated authentication cookie. |
|
| SPOIDCRL |
SharePoint Online identity/session state. |
|
| Stsservicecookie |
Microsoft service routing/session management. |
|
| odspnonce |
Security/session nonce. |
|
| rtFa |
Stores reading progress, UI SharePoint federated session token. |
|
| x-ms-gateway-slice |
Microsoft traffic routing/load balancing. |
|
Vimeo
| Cookie |
Purpose |
Duration |
| _cf_bm |
Necessary: Cloudflare cookie used to support Vimeo's bot management and security. |
30 mins |
| _cfuvid |
Necessary: Cloudflare Rate-limiting / DDoS protection. |
Until you close your browser |
| cf_clearance |
Necessary: Proof of ‘human’ verification (Captcha). |
365 days |
| player_clearance |
Necessary: Vimeo cookie used for bot prevention. |
7 days |
YouTube
| Cookie |
Purpose |
Duration |
| GPS |
Analytics: Registers a unique ID on mobile devices to support tracking based on geographical location. |
1 day |
| VISITOR_INFO1_LIVE |
Functional/Analytics: bandwidth estimation for video quality/tracking of user behaviour and unique visitors |
180 days |
| YSC |
Analytics: video view statistics |
Until you close your browser |
Managing Your Preferences
You can adjust which non-essential cookies you allow by clicking on the ‘Set cookie preferences’ (‘C’ icon) button at the bottom of every page. You can then adjust the available sliders to ‘On’ or ‘Off’, then click ‘X’ to close. You may need to refresh your page for your settings to take effect.
It is also possible to prevent the setting of cookies by adjusting your browser settings. Be aware that doing this may affect the functionality of other websites that you visit. The UK Information Commissioner’s Office (ICO) provides information on browser controls and where to find instructions for controlling cookies in different browsers. Please see the section on browser cookie settings at the end of the Cookies page on the ICO website.
Contact
If you have any queries or concerns about the use of cookies on this website, please contact our Fresco Service team.
