Cookies
Last updated
Why there is no banner
Nothing on the public side of this site sets a cookie. Not the home page, not the visa guides, not the eligibility check, not the contact form. There is no consent banner because there is nothing to consent to, and we would rather spend the pixels on the visa rules.
No advertising cookies, no tracking pixels, no third-party scripts loading other third-party scripts. Nobody is retargeting you around the internet on our budget.
Analytics, when it runs at all
The analytics script only loads where a deployment has been configured with an analytics domain. Where it has not, no script is requested and nothing is measured.
Where it does run, it is Plausible. Plausible's own data policy states that it uses no cookies, generates no persistent identifiers, and stores no personal data that can identify a person; that all data is isolated to a single day, a single website and a single device; and that raw IP addresses and user-agent strings are never stored. It tells us that a page was read, not who read it.
The two cookies the portal sets
ps_session is set when you sign in to the client portal. It carries the token that proves the browser is yours. It is HttpOnly, so no script can read it; SameSite=Lax, so it does not travel on cross-site posts; marked Secure on any https deployment; and it lasts up to thirty days, or seven days of not being used, whichever comes first. Signing out deletes it and the session behind it.
ps_case is set only if you have more than one case with us and you switch between them. It remembers which case you were last looking at, so the portal opens where you left it. Same attributes, same lifetime, no other purpose.
Both are strictly necessary in the ordinary sense of that phrase: without the first, the portal has no way to know it is you, and an account you can stay signed in to cannot work without one. Neither is used for measurement or advertising.
The eligibility check keeps nothing
Your answers to the six questions travel in the page address itself, not in a cookie and not in a record on our side. That is what makes a result reloadable and shareable.
It also means the link carries your answers to anyone you send it to. Share it with your partner or your accountant if it helps, and think twice before posting it somewhere public.
Getting rid of them
Sign out of the portal and the session cookie goes with the session. Clearing site data in your browser removes both cookies at once, and the only consequence is that the portal asks you to sign in again.
Blocking cookies for this site entirely is fine on the public pages and impossible in the portal: without ps_session there is nothing to stay signed in with.
If this ever changes
If we ever add a cookie that is not strictly necessary, we will ask before setting it, and this page will change with it. The date at the top is the date it last did. Anything unclear here goes to [email protected].
Anything on this page you want explained in fewer words, write to us or email [email protected]. A person answers, and it is the same person who would handle your case.