Contents
1What are cookies?
Cookies are small text files that are stored on your device when you visit a website. They are widely used to make websites work more effectively, remember your preferences, and provide analytics information.
When you visit the School Governance Assurance Framework, your browser automatically receives and stores cookies from our servers and from trusted third-party services we use. Every time you return to our site or access a page, your browser sends these cookies back to us, allowing us to recognize you and maintain your session.
Cookies are not programs and cannot contain viruses. They cannot access other files on your device or gather information from your hard drive. Most cookies are completely harmless and improve your experience.
2How we use cookies
We use cookies for the following purposes:
- Authentication and security — To keep you securely logged into your account and maintain your session
- Essential functionality — To ensure the application works correctly and serves the right content
- Performance monitoring — We use Cloudflare Web Analytics (cookieless) to understand how our website is used. This does not involve cookies
- User experience — To remember your preferences and settings during your visit
We do not use cookies for advertising, targeted marketing, or invasive tracking. We do not sell or share your data with third parties for marketing purposes.
3Types of cookies we use
The cookies we use fall into the following categories:
Strictly necessary cookies
These cookies are essential for the website to function properly. They enable core functionality such as authentication, security, and session management. These cookies do not require your consent under UK PECR regulations, as they are technically necessary.
Analytics
We use Cloudflare Web Analytics, which is entirely cookieless. It does not set any cookies on your device and does not collect personal information. We do not use analytics cookies.
Third-party cookies
Our website loads fonts and other resources from trusted external services, which may set their own cookies.
Cookie table
| Cookie Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
sb-* |
Supabase | Authentication session and access token storage | Strictly necessary | Session or as configured |
__cf_bm |
Cloudflare | Bot management and DDoS protection | Strictly necessary | 30 minutes |
cf_clearance |
Cloudflare | Security verification and access control | Strictly necessary | 30 minutes to 1 year |
__Secure-* |
Cloudflare Pages | Session management and page delivery | Strictly necessary | Session |
| Google Fonts cookies | Google Fonts | Font delivery and caching | Third-party | Up to 1 year |
No analytics cookies: Cloudflare Web Analytics is completely cookieless — it does not store any cookies on your device. We do not use Google Analytics or any other cookie-based analytics service.
4Strictly necessary cookies
Under the UK Privacy and Electronic Communications Regulations (PECR), certain cookies are classified as "strictly necessary" because they are technically essential for the website to function. These cookies do not require your consent.
Authentication and session cookies
When you log into the School Governance Assurance Framework, Supabase creates authentication cookies to maintain your secure session. These allow you to stay logged in, access your board audits, and use the application's features. Without these cookies, you would need to re-enter your credentials on every page.
Security and bot protection cookies
Cloudflare, our hosting provider, uses security cookies to protect our website from malicious traffic, DDoS attacks, and unauthorized access. These cookies verify that requests are legitimate and help keep your data safe. They do not track you across websites.
No consent required
Because these cookies are strictly necessary for the website to function, they are exempt from consent requirements under PECR. However, you can control or delete them through your browser settings at any time (though this may prevent the website from working correctly).
5Managing your cookies
You have full control over cookies through your web browser. You can choose to accept, reject, or delete cookies at any time. Here's how:
Browser settings
Most web browsers allow you to control cookies through your settings. You can usually find these options under "Preferences", "Settings", or "Privacy". Here are links to cookie management for popular browsers:
- Chrome: Settings → Privacy and security → Cookies and other site data
- Firefox: Preferences → Privacy & Security → Cookies and Site Data
- Safari: Preferences → Privacy → Manage Website Data
- Edge: Settings → Privacy, search, and services → Clear browsing data
Important note about functionality
If you delete or block strictly necessary cookies (such as authentication cookies), you will not be able to log into the School Governance Assurance Framework or use the application. We do not use analytics cookies, so there are no optional cookies to manage.
Your choices
You can:
- Accept all cookies
- Block all cookies (though this will break functionality)
- Allow only strictly necessary cookies
- Delete existing cookies from your browser
- Set your browser to warn you before accepting cookies
Third-party cookies
You can control third-party cookies through your browser's privacy settings. Many browsers now offer privacy modes or tracking prevention features that limit third-party cookie activity.
6Changes to this policy
We may update this Cookies Policy from time to time to reflect changes in our technology, regulatory requirements, or service offerings. Any material changes will be communicated on this page with an updated "Last updated" date.
Your continued use of the School Governance Assurance Framework after any changes constitutes your acceptance of the updated policy. We recommend reviewing this page periodically to stay informed about how we use cookies.
7Contact us
If you have any questions about this Cookies Policy, how we use cookies, or your privacy rights, please get in touch with us:
Get in touch
Email: info@governanceassurance.co.uk
We aim to respond to all enquiries within 5 working days.
For more information about privacy and data protection, please see our Privacy Policy and Data Protection information.