Cookie Policy
Version 1.0 · September 2026 · Next scheduled review: January 2027
Section 01
The Short Version
That this Policy list every cookie MyOracy sets, and say plainly that advertising and tracking technology is not among them.
This Cookie Policy expands on Section 11 of the Privacy Policy, which it does not replace. It is the full inventory that section promises: everything MyOracy sets, and nothing it doesn't.
- Category
- Advertising or marketing cookies
- Used by MyOracy?
- No.
- Category
- Analytics or cross-site tracking cookies
- Used by MyOracy?
- No.
- Category
- Cookies that build a profile of you across other sites
- Used by MyOracy?
- No.
- Category
- Strictly necessary session cookies
- Used by MyOracy?
- Yes — one, to keep you signed in. See Section 02 below.
| Category | Used by MyOracy? |
|---|---|
| Advertising or marketing cookies | No. |
| Analytics or cross-site tracking cookies | No. |
| Cookies that build a profile of you across other sites | No. |
| Strictly necessary session cookies | Yes — one, to keep you signed in. See Section 02 below. |
Section 02
The Session Cookie
That the one cookie we set do nothing beyond keeping you signed in.
When you sign in by single sign-on against your institution's identity provider, MyOracy sets a cookie (or equivalent secure browser storage) that identifies your authenticated session. It carries no advertising identifier and is read by no third party. It exists only so that you are not asked to sign in again on every page.
- Element
- Purpose
- Detail
- Authentication only — keeping you signed in to your account.
- Element
- Set by
- Detail
- MyOracy, at the moment your institution's identity provider confirms sign-in.
- Element
- Lifespan
- Detail
- Tied to your signed-in session. It is cleared when you sign out or when the session ends.
- Element
- Consent
- Detail
- None required. Cookies strictly necessary for authentication are exempt from consent under UK and EU cookie law (PECR / the ePrivacy Directive).
| Element | Detail |
|---|---|
| Purpose | Authentication only — keeping you signed in to your account. |
| Set by | MyOracy, at the moment your institution's identity provider confirms sign-in. |
| Lifespan | Tied to your signed-in session. It is cleared when you sign out or when the session ends. |
| Consent | None required. Cookies strictly necessary for authentication are exempt from consent under UK and EU cookie law (PECR / the ePrivacy Directive). |
Section 03
Cookies Set by Your Identity Provider
That we name the one cookie decision that is not ours to make.
Signing in also involves Microsoft Entra ID or Google Workspace, whichever your institution uses. That provider sets its own session cookies to keep you signed in to its identity platform, under its own privacy and cookie terms, not MyOracy's. We do not control those cookies and this Policy does not attempt to describe them.
Section 04
Managing Cookies
That the choice to block even a necessary cookie still be the reader's to make, whatever it costs them.
Because MyOracy sets no non-essential cookies, there is no cookie banner or preference centre on this site — there is nothing optional to opt in or out of. You can still block or delete the session cookie through your browser's own settings, though doing so will sign you out and may prevent you from staying signed in to the platform.
Section 05
Changes to This Policy
That any new cookie be added here first, and consent obtained where the law requires it.
Should MyOracy introduce any analytics, advertising, or other non-essential cookie technology, this Policy will be updated in advance to describe it, and consent will be obtained where the law requires it before it is set.
For any question about this Policy, contact MyOracy at contact@myoracy.co. This Policy was approved for publication in September 2026. Next scheduled review: January 2027.