Cookies are small text files placed on your computer by websites you visit. They are widely used to make websites work more efficiently and provide information to site owners.
Cookies
| Name | Domain | Priority | Retention Period |
|---|---|---|---|
| __cf_bm | .oxfordhealthbrc.nihr.ac.uk | Medium | 30 minutes |
| _gid | .nihr.ac.uk | Medium | 24 hours |
| _gat | .nihr.ac.uk | Medium | 56 seconds |
| _ga_FEGK23P81B | .nihr.ac.uk | Medium | 1 years |
| _ga | .nihr.ac.uk | Medium | 1 years |
| cf_clearance | .nihr.ac.uk | Medium | 1 years |
| CookieControl | .nihr.ac.uk | Medium | 3 months |
| YSC | .youtube.com | Medium | Session |
| VISITOR_INFO1_LIVE | .youtube.com | Medium | 6 months |
| __Secure-ROLLOUT_TOKEN | .youtube.com | Medium | 6 months |
| __Secure-YNID | .youtube.com | Medium | 6 months |
| wordpress_test_cookie | oxfordhealthbrc.nihr.ac.uk | Medium | Session |
Functional Cookies
| Name | Description | Retention Period |
|---|---|---|
| __cfduid | The ‘__cfduid’ cookie is set by the CloudFlare service to identify trusted web traffic. It does not correspond to any user id in the web application, nor does the cookie store any personally identifiable | 5 years |
| __cfruid | Used by the content network, Cloudflare, to identify trusted web traffic. | Session |
| __cf_bm | Cloudflare’s bot products identify and mitigate automated traffic to protect your site from bad bots. Cloudflare places the __cf_bm cookie on End User devices that access Customer sites that are protected by Bot Management or Bot Fight Mode. The __cf_bm cookie is necessary for the proper functioning of these bot solutions. | 30 minutes |
| cf_chl_2 | Used by Cloudflare for the execution of Javascript or Captcha challenges. These cookies are not used for tracking or beyond the scope of the challenge. | session |
| __cflb | When enabling session affinity with Cloudflare Load Balancer, Cloudflare sets a __cflb cookie with a unique value on the first response to the requesting client. Cloudflare routes future requests to the same origin, optimizing network resource usage. In the event of a failover, Cloudflare sets a new __cflb cookie to direct future requests to the failover pool. | 30 minutes |
| _cfuvid | The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. | Session |
| cf_clearance | Whether a CAPTCHA or Javascript challenge has been solved. | 1 years |
| CookieControl | Stores user consent preferences for your website. | 3 months |
| CookieControlTC | Stores IAB TCF consent preferences. | 3 months |
| wordpress_test_cookie | Cookie set by WordPress to check if the cookies are enabled on the browser to provide appropriate user experience to the users | session |
Analytics Cookies
| Name | Description | Retention Period |
|---|---|---|
| _ga | ID used to identify users | 1 years |
| _ga_* | Used to identify and track an individual user session. | 2 years |
| _gid | ID used to identify users for 24 hours | 24 hours |
| _gat | Used to monitor number of Google Analytics server requests when using Google Tag Manager | 58 seconds |
| _dc_gtm_ | Used to monitor number of Google Analytics server requests | 1 minute |
| AMP_TOKEN | Contains a token code that is used to read out a Client ID from the AMP Client ID Service. By matching this ID with that of Google Analytics, users can be matched when switching between AMP content and non-AMP content. | 1 year |
| _gat_* | Used to set and get tracking data | 1 hour |
| _gac_ | Contains information related to marketing campaigns of the user. These are shared with Google AdWords / Google Ads when the Google Ads and Google Analytics accounts are linked together. | 90 days |
| __utma | ID used to identify users and sessions | 2 years |
| __utmt | Used to monitor number of Google Analytics server requests | 10 minutes |
| __utmb | Used to distinguish new sessions and visits. This cookie is set when the GA.js javascript library is loaded and there is no existing __utmb cookie. The cookie is updated every time data is sent to the Google Analytics server. | 30 minutes |
| __utmc | Used only with old Urchin versions of Google Analytics and not with GA.js. Was used to distinguish between new sessions and visits at the end of a session. | session |
| __utmz | Contains information about the traffic source or campaign that directed user to the website. The cookie is set when the GA.js javascript is loaded and updated when data is sent to the Google Anaytics server | 6 months |
| __utmv | Contains custom information set by the web developer through the _setCustomVar method in Google Analytics. This cookie is updated each time new data is sent to the Google Analytics server. | 2 years |
| __utmx | Used to determine whether a user is included in an A / B or Multivariate test. | 18 months |
| __utmxx | Used to determine when the A / B or Multivariate test in which the user participates ends | 18 months |
| FPAU | Assigns a specific ID to the visitor. This allows the website to determine the number of specific user-visits for analysis and statistics. | session |
| FPID | Registers statistical data on users’ behaviour on the website. Used for internal analytics by the website operator. | 1 years |
| FPLC | This FPLC cookie is the cross-domain linker cookie hashed from the FPID cookie. It’s not HttpOnly, which means it can be read with JavaScript. It has a relatively short lifetime, just 20 hours. | 20 hours |
Marketing Cookies
| Name | Description | Retention Period |
|---|---|---|
| GPS | Registers a unique ID on mobile devices to enable tracking based on geographical GPS location. | 1 day |
| VISITOR_INFO1_LIVE | Tries to estimate the users’ bandwidth on pages with integrated YouTube videos. Also used for marketing | 6 months |
| PREF | This cookie stores your preferences and other information, in particular preferred language, how many search results you wish to be shown on your page, and whether or not you wish to have Google’s SafeSearch filter turned on. | 10 years |
| YSC | Registers a unique ID to keep statistics of what videos from YouTube the user has seen. | Session |
| DEVICE_INFO | Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. | 180 days |
| LOGIN_INFO | This cookie is used to play YouTube videos embedded on the website. | 2 years |
| VISITOR_PRIVACY_METADATA | Youtube visitor privacy metadata cookie | 6 months |
Cookie Policy for EU/UK
We comply with GDPR and UK Data Protection regulations, requiring us to obtain cookie consent.
Google Analytics Cookies
We use Google Analytics to collect user interaction data for site improvement.
Disclaimer
This policy is subject to updates and changes. Users are encouraged to regularly review our policy.
This scan was generated on 29/09/2025, 11:55.
