Legal
Cookie policy
What cookies this site sets, why, and how to control them.
Last updated: 18 May 2026.
CASRAI.org uses a small number of cookies — most are strictly necessary for the site to function, and one set is used for analytics (Google Analytics 4). We do not use cookies for advertising, cross-site tracking, or behavioural profiling.
Cookies we set
| Cookie | Set by | Purpose | Lifespan | Category |
|---|---|---|---|---|
| _ga | GA4 (Google Analytics) | Distinguishes unique visitors | 13 months | Analytics |
| _ga_J5HT9GKYTN | GA4 (Google Analytics) | Persists per-property session state | 13 months | Analytics |
| wordpress_logged_in_* | WordPress (contributors only) | Authentication session | 2 weeks (or session) | Strictly necessary |
| wp-settings-* | WordPress (contributors only) | Persists admin-UI preferences | 1 year | Strictly necessary |
| __cf_bm, cf_clearance | Cloudflare | Bot management + DDoS protection | 30 min / 30 days | Strictly necessary |
Analytics cookie purpose
The _ga and _ga_J5HT9GKYTN cookies are set by Google Analytics 4. They let us count unique visitors and understand which pages of the CASRAI Dictionary, CRediT documentation, and editorial are actually used by the research-administration community. We use this to prioritise content updates and identify orphan pages. No personally identifiable information is sent to GA4. IP addresses are anonymised by Google before storage; we never see them.
How to opt out
You can stop the analytics cookies from being set in any of the following ways:
- Browser opt-out add-on — install the Google Analytics Opt-out Browser Add-on (works in Chrome, Firefox, Safari, Edge).
- Browser settings — block third-party cookies and trackers in your browser's privacy settings.
- Content blockers — uBlock Origin, Brave Shields, Privacy Badger, AdGuard, NextDNS, or Pi-hole all block
googletagmanager.comby default. - Do Not Track / GPC — our site honours the browser Do Not Track header and Global Privacy Control signals; if either is set, GA4 will not load.
Strictly-necessary cookies (WordPress session + Cloudflare bot management) cannot be opted out of without breaking core site features.
Third-party data sharing
- Google LLC processes GA4 cookie data under the EU-US Data Privacy Framework. See Google's privacy policy.
- Cloudflare, Inc. processes infrastructure cookies under its own privacy policy.
No data is shared with advertising networks. No data is sold or exchanged with data brokers.
Why we don't show a cookie banner
Under UK GDPR Article 6(1)(f), aggregated, anonymised analytics on first-party cookies — where the user has a clear opt-out path — relies on legitimate interests as the lawful basis and does not require prior consent. We've documented this on our privacy page. If you would prefer a consent-first banner, opt out via any of the methods above and your preference will persist via your browser settings.
Contact
Questions about cookies: [email protected].
