Website Cookie Policy
This statement explains how cookies and similar technologies are used on www.maths.ox.ac.uk, the Mathematical Institute’s main website. Other departmental and University websites may have their own cookie statements.
What are cookies?
Cookies are small pieces of information stored by your browser when you visit a website. They support functions such as maintaining a signed-in session, remembering preferences and measuring website use.
First-party cookies are only accessible by this website, while third-party cookies may be shared between websites, depending on your browser settings. Websites may also use related technologies, such as Local Storage, to store or access information on your device.
To find out more about cookies, including how to see what cookies have been set and how to manage and delete them please visit the Information Commissioner's Office.
Managing cookie consent
When you first visit this website, you will be asked to accept the cookies listed below. You can change your mind at any time by clicking the icon in the bottom-right corner of the page to open the cookie consent popup.
If your browser doesn't support JavaScript, or it has been disabled, you will not be able to accept optional cookies nor use the services that depend on them.
Types of cookies we use
We use the following types of cookies:
- Essential Cookies - These are required to use the website. They can only be disabled by changing your browser preferences, but doing so will prevent some functionality working.
- Analytics - We use Google Analytics to help us to monitor and improve the performance of our website to provide you with the best possible experience. It will only set cookies once you have given consent.
- Embedded External Content - External services such as YouTube and Google Maps may set their own third-party cookies, which may be used for tracking and advertising. These will only be displayed once you have given consent.
Some pages provide ordinary links to externally hosted videos instead of embedded players. Following these links takes you to another website, where that provider's privacy information and cookie controls apply.
Specific cookies we set
The tables below identify the cookies we use and explain the purposes for which they are used.
Essential – Drupal CMS
Drupal is the content management system behind this website. It may set the following first-party cookies:
| Cookie | Purpose | Duration |
|---|---|---|
SSESS<identifier> | (Logged in users only) Drupal session ID - used to distinguish authenticated user sessions. | Session |
It uses Local Storage for:
| Key | Purpose | Duration |
|---|---|---|
Drupal.toolbar.* | (Logged in users only) Remembers the selected tab in the top navigation bar. | Indefinite |
It uses Session Storage for:
| Key | Purpose | Duration |
|---|---|---|
Drupal.contextual.* | (Logged in users only) Used as a cache for contextual editing links. | Session |
Drupal.escapeAdminPath,escapeAdminPath (legacy) | (Logged in users only) Remembers the previous page for the "Back to site" link. | Session |
Drupal.toolbar.* | (Logged in users only) Remembers the state of the top navigation bar. | Session |
Essential – Klaro Cookie & Consent Manager
We use the self-hosted, open source Klaro module for Drupal to display a cookie banner with “Accept”, “Decline” and “Customise” options. It sets a single first-party cookie:
| Cookie | Purpose | Duration |
|---|---|---|
klaro | Records your response to the cookie consent prompt. | 180 days |
This is used to determine whether to enable the services listed below.
Specific cookies set by our service providers
The tables below identify the cookies set by our service providers and explain the purposes for which they are used.
The cookies used by each provider may change over time. This list will be reviewed periodically and updated as we become aware of any changes. Please see the individual privacy policies for more detailed information.
Essential – Google reCAPTCHA
reCAPTCHA is a fraud and abuse prevention system by Google LLC, used to prevent automated form spam. It may set the following third-party cookies when you visit a form with reCAPTCHA enabled:
| Cookie | Purpose | Duration |
|---|---|---|
_GRECAPTCHA | Help distinguish between genuine users and harmful bots on websites. | 180 days |
It uses Local Storage for:
| Key | Purpose | Duration |
|---|---|---|
rc::* | Help distinguish between genuine users and harmful bots on websites. | Indefinite |
It uses Session Storage for:
| Key | Purpose | Duration |
|---|---|---|
rc::* | Help distinguish between genuine users and harmful bots on websites. | Session |
Also see: Google's Privacy Policy.
Analytics – Google Analytics
The website uses Google Analytics 4, provided by Google, to measure website use for statistical purposes and inform improvements.
The Analytics integration is loaded independently of the response recorded by the cookie banner. It collects information about pages viewed, interactions, referral sources and browser or device characteristics, and sends information to Google.
If consent is given, Google Analytics additionally sets the following first-party cookies to allow more detailed information collection (for example, visit duration):
| Cookie | Purpose | Duration |
|---|---|---|
_ga | Distinguishes users. Shared across all ox.ac.uk sites. | 2 years |
_ga_YJ01E46BB2 | Persists session state. Specific to this site. | 2 years |
Also see: Google's explanation of Analytics cookies, Google's Privacy Policy.
Embedded Content – Google Maps
Google Maps may be embedded in the site. They will only be displayed if consent is given. They may set third-party cookies such as:
| Cookie | Purpose | Duration |
|---|---|---|
NID | Advertising, analytics, personalisation, preferences. | 6 months |
Also see: Google's Privacy Policy.
Embedded Content – Panopto
Videos and lecture recordings hosted by Panopto may be embedded in the site. They will only be displayed if consent is given. They may set third-party cookies such as:
| Cookie | Purpose | Duration |
|---|---|---|
UserSettings | Store the most recent provider used to log into Panopto. Track anonymous users for analytics purposes. | 2 years |
Also see: Panopto's use of cookies and Panopto's Privacy Policy.
Embedded Content – Vimeo
Videos hosted by Vimeo may be embedded in the site. They will only be displayed if consent is given. We use the "Do Not Track" (DNT) setting where possible. They may set third-party cookies such as:
| Cookie | Purpose | Duration |
|---|---|---|
_cf_bm | Cloudflare bot manager manages incoming traffic that matches the criteria associated with bots. | 30 mins |
_cf_ob | Unknown (Cloudflare). | Session |
_cfuvid | Cloudflare cookie used to enforce rate-limiting rules. | Session |
cf_clearance | Cloudflare cookie used for bot prevention. | 1 year |
COOKIE_ID_PICOX_ID | Unknown. | 1 day |
player | Stores preferences for player controls (i.e. volume, stream quality, captions). | 1 year |
player_clearance | Vimeo cookie used for bot prevention. | 7 days |
vuid | Vimeo-generated ID used for generating analytics information for the video owner. | 2 years |
It uses Local Storage for:
| Key | Purpose | Duration |
|---|---|---|
LOCAL_STORAGE_ID_PICOX_ID | Unknown. | Indefinite |
LOCAL_STORAGE_ID_VIMEO_PLAYER | Unknown. | Indefinite |
PLAYER_PICOX_SAMPLING_SEED | Unknown. | Indefinite |
It uses Session Storage for:
| Key | Purpose | Duration |
|---|---|---|
_cfPre_tabId | Unknown (Cloudflare). | Session |
Also see: Vimeo Player Cookies and Vimeo's Privacy Policy.
Embedded Content – YouTube
Videos hosted by YouTube may be embedded in the site. They will only be displayed if consent is given. We use YouTube’s privacy-enhanced mode where possible, which limits how views of embedded videos influence personalisation. They may set third-party cookies such as:
| Cookie | Purpose | Duration |
|---|---|---|
__Secure-ROLLOUT_TOKEN | Launch new features and measure related impact. | 6 months |
__Secure-YNID | Analytics, advertising, personalisation. | 6 months |
PREF | Store user preferences. | 8 months |
VISITOR_INFO1_LIVE | Analytics, advertising, personalisation. | 6 months |
VISITOR_PRIVACY_METADATA | Store the user's privacy and consent settings for embedded videos. | 6 months |
YSC | Detect spam, fraud, and abuse. | Session |
It uses Local Storage for:
| Key | Purpose | Duration |
|---|---|---|
yt-icons-last-purged | Ensure cached icons are up to date. | Indefinite |
yt-player-caption-sticky-language | Store the user's caption preferences. | Indefinite |
yt-player-caption-persistence | Store the user's caption preferences. | Indefinite |
ytidb::LAST_RESULT_ENTRY_KEY | Store the last search result entry that was clicked by the user, provide more relevant search results in the future. | Indefinite |
It uses Session Storage for:
| Key | Purpose | Duration |
|---|---|---|
yt-player-caption-language-preferences | Store the user's caption preferences. | Session |
Also see: YouTube's approach to privacy, How Google uses cookies and Google's Privacy Policy.
Further information
Any changes we may make to our Cookie Policy in the future will be posted on this page.
For information about the University's handling of personal information, your rights and contact details, see our Website Privacy Policy.