| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
| csrftoken | IARO (first party) | Stops other sites submitting IARO forms in your browser. | One year | Necessary. Secure, SameSite=Lax. |
| sessionid | IARO (first party) | Keeps you signed in after member login. Not set until you sign in. | 12 hours of inactivity, or when you sign out | Necessary. HttpOnly, Secure when served over HTTPS, SameSite=Lax. |
Cloudflare cookies (for example __cf_bm or similar) | Cloudflare | May be set by the CDN that delivers the site, to distinguish people from automated traffic. | Follows Cloudflare’s current periods, typically under 30 minutes for bot-management cookies | Necessary for delivery and security when Cloudflare is in use. |
If we later add analytics, embedded video or other optional tools, those will not load until you have a clear Accept or Reject choice. None of those tools are installed today.
Read the Privacy Notice for the rest of IARO’s processing.