What are cookies?
Cookies are small text files placed on your device by a website when you visit it. They allow the website to remember information about your visit, such as whether you are logged in. Cookies cannot run programmes or carry viruses.
In the UK, the use of cookies is governed by the Privacy and Electronic Communications Regulations 2003 (PECR) and the UK General Data Protection Regulation (UK GDPR). Strictly necessary cookies can be set without consent. All other cookies require your prior, freely given consent.
Essential cookies we set
These cookies are required for the platform to function. They cannot be disabled without breaking core features such as logging in. They are set by myBursary directly and are never used for advertising or tracking.
| Name | Purpose | Duration | Category |
|---|---|---|---|
_ga |
Distinguishes unique users for Google Analytics. Contains a randomly generated identifier — no personal data. | 2 years | Analytics (requires consent) |
_ga_SR7J6SW71H |
Maintains GA4 session state for the specific property. | 2 years | Analytics (requires consent) |
sessionid |
Maintains your login session. Without this cookie you would be signed out on every page load. | 30 minutes of inactivity; deleted when the browser is closed | Strictly necessary |
csrftoken |
Protects all form submissions against Cross-Site Request Forgery (CSRF) attacks by verifying that requests originate from myBursary pages. | 1 year | Strictly necessary |
cookie_consent |
Stores your cookie preference so we don't show you the cookie notice on every page visit. | 1 year | Strictly necessary |
Third-party connections
In addition to the cookies above, loading certain pages causes your browser to make requests to third-party servers to retrieve resources such as fonts and scripts. These requests are not cookies, but they do involve your browser sending your IP address to third-party services. We rely on legitimate interests (UK GDPR Art. 6(1)(f)) as the lawful basis for these connections, as they are necessary to deliver a functional and secure service.
| Service | Provider | Purpose | Pages affected | Data sent |
|---|---|---|---|---|
| Google Fonts | Google LLC | Serves the typefaces used across myBursary (Syne, Plus Jakarta Sans, JetBrains Mono). Google states that font requests are not used for advertising and that IP addresses are anonymised after a short period. | All pages | IP address, browser user-agent, referrer URL |
| Bootstrap CDN | jsDelivr (Prospect One) | Serves the Bootstrap CSS/JS framework and Bootstrap Icons font used for the site's layout and interface. jsDelivr processes anonymised access logs only. | All pages | IP address, browser user-agent |
| Cloudflare Turnstile | Cloudflare, Inc. | A privacy-preserving bot-protection challenge used on the login, sign-up, and password reset pages to prevent automated attacks. Turnstile does not use intrusive tracking methods or build individual profiles. | Login, sign-up, password reset | IP address, browser characteristics, interaction patterns |
We have assessed these connections under a Legitimate Interests Assessment (LIA). The legitimate interest pursued is providing a functional, secure, and well-designed platform. We believe this interest is not overridden by users' privacy interests, given the limited nature of the data transferred and the service necessity of each connection.
If you prefer to prevent these third-party connections entirely, you can use a browser extension such as uBlock Origin to block requests to these domains. Note that blocking Cloudflare Turnstile may prevent you from logging in.
What we don't do
- We do not use advertising or retargeting cookies (e.g. Google Ads, Meta Pixel).
- We do not sell, rent, or share cookie data with third parties for commercial purposes.
- We do not use fingerprinting or other techniques to identify you without cookies.
- We do not use social media tracking pixels (e.g. Facebook, LinkedIn, Twitter/X).
Managing your preferences
Update your cookie preference
You can change your cookie preference at any time using the buttons below. Your choice
is stored in the cookie_consent cookie for 1 year.
Current preference
Not yet set
Browser cookie controls
You can also control cookies at the browser level. Most browsers allow you to block or delete cookies entirely. Note that blocking essential cookies will prevent you from logging in to myBursary.
Opting out of Google Fonts
Google provides information about opting out of Google's data collection at policies.google.com/technologies/cookies. You can also block font requests via a browser content-blocking extension.
Changes to this policy
If we make material changes to how we use cookies — for example, by adding non-essential cookies — we will update this page, update the effective date, and re-show the consent banner so you can review and update your preference.
Previous versions of this policy are available on request by emailing [email protected].
Contact
For any questions about this Cookie Policy or how we handle your data, please contact:
Senha Ltd — Data Protection
We aim to respond within 5 working days.