Cookie Policy
Last Updated: 3 September 2026 • Version 1.0 (Draft)
1. Our Privacy-First Commitment
mycasework.org is designed as a secure, privacy-first public service utility.
Zero Advertising or Cross-Site Tracking: We never deploy advertising cookies, marketing pixels, social media trackers, or third-party behavioral analytics. We do not sell data or profile constituents.
2. Strictly Necessary / Essential Cookies
These cookies and local storage keys are essential for the operation of the platform and cannot be switched off in our systems. They are established in response to actions made by you, such as logging in or submitting a form.
| Identifier | Category | Purpose | Duration |
|---|---|---|---|
| __session / firebase:authUser | Authentication | Maintains encrypted caseworker login session across dashboard routes. | Session / 14 days |
| nonce | Security & CSRF | HMAC-signed cryptographic token preventing CSRF and replay attacks on public contact forms. | 15 minutes |
| NEXT_LOCALE | Preferences | Remembers your chosen language preference (English, Welsh, or Irish). | 1 year |
3. Operational Telemetry (PostHog EU)
To monitor platform error rates, page load performance, and usability bugs, we utilize PostHog hosted in the European Union (eu.i.posthog.com).
- Zero Constituent PII: Inquiries, constituent names, postcodes, and casework text are explicitly masked and never transmitted to our telemetry service.
- Data Residency: Telemetry is processed within the EU in compliance with UK and EU GDPR standards.
4. Managing Your Cookies
You can configure your browser to block or alert you about essential cookies, but blocking them will prevent logging into your account or submitting public contact forms. To delete existing cookies, consult your browser's privacy settings (e.g. Chrome, Edge, Safari, or Firefox).