document: title: site privacy & cookie policies
text: ## Privacy

Standard Apache logs are kept, recording certain details of every HTTP[S] interaction. These logs are deleted after 28 days. Beyond that point only anonymous statistical data is kept for reporting purposes.

The UCS reserves the right to keep log files if an investigation is under way for the purposes of assisting with the investigation.

Details stored in the standard Apache log files:

  * Internet address of connecting client
  * Authenticated user id
  * Time stamp
  * Request made
  * Server's response code and number of bytes returned
  * The "user agent" string identifying the make of client



In addition, sites which have used Falcon's facilities to create forms will be recording the information passed to each form. You must refer to the site's local privacy policy to determine how this material is processed.

## Cookies

  * Users who visit a Falcon site may receive the Google Analytics cookies if the site administrator has enabled them (whether or not they authenticate).
  * Sites may embed third-party material (e.g. YouTube videos) and these may carry their own cookies. You must refer to the site's local cookie policy to determine what cookies are being set and for what purpose.
  * Users who authenticate will receive cookies from the Raven/Shibboleth authentication system.

Cookie| Returned to| Function| P/S*  
---|---|---|---  
__utma | Falcon site | Google Analytics | P  
__utmb | Falcon site | Google Analytics | P  
__utmc | Falcon site | Google Analytics | S  
__utmz | Falcon site | Google Analytics | P  
_shibsession_... | shib.raven.cam.ac.uk | Authentication | S  
Ucam-WLS-Session | shib.raven.cam.ac.uk | Authentication | S  
JSESSIONID | shib.raven.cam.ac.uk | Authentication | S  
_idp_session | shib.raven.cam.ac.uk | Authentication | S  
_ZopeId | Falcon site | Session management | S  
  
*Final column: S marks a session cookie. P marks a persistent cookie.

Session cookies expire when the user quits the browser (or earlier).

Persistent cookies remain within the browser after it is quit and restarted, until they reach their expiry date.

Raven privacy & cookie policy:   
http://raven.cam.ac.uk/privacy.html

Google analytics cookie policy:   
http://www.google.com/analytics/terms/us.html