Cookie Notice
Last updated 22 August 2026
This site sets no analytics, advertising or tracking cookies. That is not a promise about our intentions — it is a description of the code. There is no Google Analytics, no advertising pixel, no social media widget, and no third-party script of any kind.
That is also why you are not being asked to accept anything. Consent banners exist because sites set cookies people would refuse if asked. We do not set any, so there is nothing to ask about.
If you are just visiting
Browsing this site, reading these pages and submitting the access request form sets no cookies at all. You can check with your browser's developer tools.
If you are an administrator
Signing in to the admin panel sets two cookies. Both are strictly necessary — sign-in cannot work without them — so no consent is required for them under the UK/EU cookie rules.
| Name | Purpose | Lifetime |
|---|---|---|
oaslin_pending | Remembers that a password was accepted while the second factor is entered | 5 minutes |
oaslin_session | Keeps an administrator signed in | Up to 8 hours idle, 7 days maximum |
Both are marked HttpOnly (unreadable by JavaScript), Secure (sent only over HTTPS), and SameSite=Lax. The session cookie holds a random token; the server stores only a hash of it, so its database never contains anything that could be replayed as a live session.
Signing out deletes both immediately.
Controlling cookies
Your browser can block or delete cookies for any site. Blocking ours will not affect browsing or the request form at all — it will only stop administrators being able to stay signed in.
Changes
If we ever add a cookie beyond the two above, this page will say so before it happens, and anything non-essential will ask for consent first. See our Privacy Notice for what we do with data generally.
Contact
Questions about this notice can go to admin@oaslin.com.