Cookie Policy

Last updated: 30 September 2026

Cookies are small files that a website can store in your browser. This page describes the cookies used by Consents.org.uk, which is operated by Innovations and More Ltd.

In short

We do not use analytics, advertising, marketing or tracking cookies.
We do not use third-party cookies.
Visitors to the public information pages receive no cookies from this website.
The only cookies are essential sign-in cookies, one each for site administrators, surgeons, and patients entering an access code.

The cookies we use

Name: consents_admin
Purpose: keeps an administrator signed in to the administration area and protects its forms against misuse.
Essential: yes. Administrators cannot sign in without it. Because it is strictly necessary for a service the administrator has asked for, it does not need consent.
When it is set: when someone opens the administrator sign-in area at /admin. Patients and other visitors do not need to use this area.
Duration: a session cookie. It is removed when the browser is closed, and when the administrator signs out.
Other details: it applies only to the /admin area, cannot be read by page scripts (HttpOnly), and is sent only over HTTPS when the site is used over HTTPS.

Name: consents_surgeon
Purpose: keeps a surgeon signed in to the surgeon area and protects its forms against misuse.
Essential: yes. Surgeons cannot sign in without it. Because it is strictly necessary for a service the surgeon has asked for, it does not need consent.
When it is set: when someone opens the surgeon sign-in or registration pages under /surgeon. Patients and other visitors do not need to use this area.
Duration: a session cookie. It is removed when the browser is closed, and when the surgeon logs out.
Other details: it applies only to the /surgeon area, cannot be read by page scripts (HttpOnly), and is sent only over HTTPS when the site is used over HTTPS.

Name: consents_patient
Purpose: keeps a patient signed in after they enter the access code their surgeon gave them, and protects the form against misuse.
Essential: yes. Patients cannot sign in without it. Because it is strictly necessary for a service the patient has asked for, it does not need consent.
When it is set: when someone opens the patient access page at /patient. Other visitors do not need to use this page.
Duration: a session cookie, removed when the browser is closed or the patient signs out. The website also ends the session after 60 minutes of inactivity, and after 12 hours at most.
Other details: it applies only to the /patient area, cannot be read by page scripts (HttpOnly), and is sent only over HTTPS when the site is used over HTTPS. It contains no access code and no personal information.

Stripe (payments)

If a surgeon subscribes, they are sent to Stripe's own payment pages on stripe.com. Stripe sets and uses its own cookies on its own website, under Stripe's policies, which we do not control. This website does not set any third-party cookies.

Browser storage (not a cookie)

When you press OK on the notice at the bottom of the page, your browser keeps a small setting named consents_notice_dismissed in its local storage on your device, so that the notice is not shown again. It is not a cookie, is not sent to our server and contains no personal information. You can remove it by clearing this website's data in your browser.

Controlling cookies

You can view, block and delete cookies in your browser's settings. The help pages for your browser explain how. Blocking these cookies would only stop administrators, surgeons and patients from signing in; the public pages work without cookies.

Changes

If the website starts using other cookies, we will update this page first. The date at the top shows when it was last updated.