Legal
Cookie Policy
What we store in your browser, and why there is no consent banner. Last updated 16 August 2026.
Draft — not yet reviewed. This document is a working draft and has not been settled by a New Zealand qualified lawyer. Do not rely on it as a binding statement of our obligations to you until this notice is removed.
The short version
We use only the cookies required to keep you signed in and to keep the service secure. We do not use advertising cookies, cross-site trackers, or third-party analytics that profile you. That is why you are not asked to accept anything when you arrive.
Cookies we set
| Cookie | Purpose | Retained |
|---|---|---|
| Session | Keeps you signed in as you move between pages. Set by our identity provider when you authenticate. | Until you sign out or it expires |
| CSRF token | Confirms that a form submission came from a page we served, which prevents cross-site request forgery. | Session |
| Preferences | Remembers interface choices, such as a dismissed notice, so you are not shown the same thing repeatedly. | Up to 12 months |
The marketing pages you are reading now are static and set no cookies at all. Cookies appear once you sign in.
What we do not do
- No advertising or retargeting pixels.
- No cross-site tracking, and no sale of behavioural data.
- No session recording or heatmap tools on pages holding case material.
Managing cookies
You can clear or block cookies in your browser settings. Blocking the session and CSRF cookies will prevent you from signing in, because the service cannot maintain an authenticated session without them.
More information
How we handle personal information generally is set out in our Privacy Policy.