Cookie Policy
This Cookie Policy explains how Orfid uses cookies and similar technologies in compliance with the Privacy and Electronic Communications Regulations (PECR), the UK GDPR, and Orfid’s public-interest governance principles.
1. What are cookies?
Cookies are small text files stored on your device that help websites function securely and effectively. Some cookies are essential to the operation of the Orfid platform and cannot be disabled.
Orfid applies a minimal tracking commitment to protect sensitive reporting activity and user confidentiality.
2. Types of cookies used by Orfid
Strictly necessary cookies
Required for secure login, session continuity, submissions, and the operation of the ANUBIS authentication system. These cookies do not require consent under PECR.
Functional cookies
Support optional features such as saved preferences or accessibility settings. These may require consent depending on how they operate.
Analytics cookies
Orfid may use privacy-preserving analytics to understand platform usage and detect technical issues. Analytics are never used to profile users or track identifiable behaviour.
Security and integrity cookies
Used by ANUBIS and THOTH for fraud detection, device verification, suspicious activity monitoring, and platform integrity.
Third-party cookies
Orfid avoids third-party tracking wherever possible. Where external services are required, those providers may set cookies governed by their own policies.
3. Cookie consent management
Under PECR, consent is required for all cookies except those that are strictly necessary for secure operation.
- Accepting all cookies
- Rejecting non-essential cookies
- Customising cookie preferences
Consent choices are recorded securely and can be changed at any time.
4. Managing cookies
Users may control or delete cookies through their browser settings. Disabling cookies may affect:
- Secure login sessions
- Report and article submissions
- Trusted device verification
- Interactive tools
5. Minimal tracking commitment
- No advertising cookies
- No behavioural profiling
- No sale of user data
- No commercial trackers
Only the minimum number of cookies required for secure operation are used.
6. Server logs and platform security
- Authentication attempts
- Error diagnostics
- Fraud and abuse monitoring
- Operational metrics
Server logs do not create user profiles and are retained in accordance with THOTH governance rules and applicable legal obligations.
7. Compliance and transparency
- Auditable consent records
- Policy version control
- Regulator-accessible reporting
- UK GDPR and PECR compliance
8. Contact
Email: support@orfid.co.uk