Cookies
EdSaf uses a small number of cookies, and every one of them is there to make the service work or to keep it secure. We do not use cookies for advertising, and we do not track you across other websites.
Last reviewed: 31 August 2026
The cookies EdSaf sets
These are the only cookies EdSaf places on your device. Four of them exist to sign you in and to protect the forms you submit.
| Cookie | What it does | Type |
|---|---|---|
access_token |
Keeps you signed in to your dashboard after you enter your one-time code. Cannot be read by scripts in your browser. | Strictly necessary |
refresh_token |
Lets your session continue without asking for a new code every few minutes. Checked against our records each time, so a session can be ended from our side. | Strictly necessary |
_csrf |
Protects every form on the site against cross-site request forgery, where another website tries to submit something as you. Cannot be read by scripts in your browser. | Strictly necessary |
XSRF-TOKEN |
The matching token the page reads and sends back with each form, so we can confirm the request genuinely came from your browser. | Strictly necessary |
Why there is no cookie banner
Under the Privacy and Electronic Communications Regulations, cookies that are strictly necessary to provide a service the user has asked for do not require consent. Every cookie above is in that category, so EdSaf does not interrupt you with a banner. If we ever add analytics or any non-essential cookie, we will ask for your consent first and update this page.
Reporting anonymously
The public reporting screens do not require an account, and none of the sign-in cookies above are set unless you log in to a dashboard. If you choose to report anonymously, we do not use cookies to identify you.
Other services used on our pages
Our pages load typefaces from Google Fonts. Google Fonts does not set cookies, but the request does reach Google's servers, which means your IP address is visible to them as part of delivering the font files. We use no analytics, advertising or social media tracking on any EdSaf page.
Managing cookies
You can block or delete cookies in your browser settings at any time. Because the cookies above are the ones that sign you in and protect our forms, blocking them will stop the dashboard from working and may stop reports from submitting. The public reporting screens will still load.