A factual inventory of the cookies and storage technologies used by EvidenceReady.
Current optional analytics state
Optional analytics is disabled unless a real approved integration is explicitly configured. When configured, it remains off until you accept it, operates only on public pages, and never runs in provider, founder, invitation, case, report or download routes.
Cookies are small values stored by a browser and sent with relevant requests. Browser storage can remember a choice without sending it to every server request. EvidenceReady uses them only where they support security, authentication or a privacy choice, plus optional public-site analytics where separately enabled and accepted.
| Technology | Owner and scope | Purpose | Duration and category |
|---|---|---|---|
| er_provider_session | EvidenceReady. Private provider workspace, invitation, case and report routes. | Keeps an authorised provider securely signed in. | Up to 12 hours; removed on logout. First-party, strictly necessary, Secure, HttpOnly, SameSite=Strict. |
| er_founder_session | EvidenceReady. Founder and administration routes. | Keeps an authorised founder securely signed in. | Bounded server-defined session; removed on logout. First-party, strictly necessary, Secure, HttpOnly, SameSite=Strict. |
| er_consent_preferences | EvidenceReady. Public website, stored in local browser storage. | Remembers the privacy choice and policy version so the choice is not repeatedly requested. | Up to 180 days. First-party preference storage; no cross-site identifier. |
| Vercel authentication technologies | Vercel. Protected Preview deployments only. | Restricts access to non-production Preview deployments. | Controlled by the Preview authentication session. Third-party/hosting, strictly necessary on protected Previews only. |
When optional analytics is configured, the first choice offers equally accessible Accept, Decline and Manage actions. Declining does not restrict public or private EvidenceReady functionality.
Use Cookie settings in the footer at any time. Withdrawal stops future optional activity immediately and removes known removable first-party analytics cookies.
Policy version 1.0. Last reviewed 29 July 2026. If the purpose or technology materially changes, EvidenceReady asks for a new choice. Privacy questions can be sent to privacy@evidenceready.co.uk.
