Cookies policy

Last reviewed: 14 November 2026

Cookies and browser storage

Staff Hub and CMS sign-in use two strictly necessary cookies: __Host-lowry_oauth binds sign-in to your browser for ten minutes; __Host-lowry_session is a browser-session cookie holding a random identifier. Server access ends after 30 minutes of inactivity, after eight hours, or when the account signs in elsewhere. Both are Secure, HttpOnly and SameSite=Lax. Logout clears both and deletes the active website session. We do not use local storage, tracking pixels or device fingerprinting. Menu and public-search states are held in page memory only. The school Staff Hub motivation quote stores a quote number in session storage under lowry-motivation-quote so it can advance on the next page load; this lasts for the browser tab session. Your browser may cache public files as part of delivering the website.

Optional technologies

There are no advertising tools or client-side analytics scripts, embedded videos, maps, social feeds or externally hosted fonts in the current site. The Roblox group and Discord server open only when you follow their links. Anonymous server-side daily page counts do not set cookies or identify visitors. The cookie panel does not enable analytics, advertising or other optional tracking.

Cloudflare network reporting

A public response check on 25 September 2026 found Cloudflare Network Error Logging headers on the live domain. These instruct compatible browsers to send network-failure reports to Cloudflare and retain a reporting policy for up to seven days. This setting needs to be disabled in the Cloudflare account for the intended minimal-data setup; a cookie popup in this website cannot control it.

Cloudflare security

Cloudflare hosts and protects the website. Depending on the features enabled in the live account and the requests made, it can use security cookies, for example challenge or bot-protection cookies. Their presence and expiry must be confirmed against the live service; they have not been verified by the source-code audit. See Cloudflare's cookie documentation.

Cookie information and preferences

The public cookie panel explains essential sign-in, security and preference storage. Choosing Use essential cookies or Save preferences writes the first-party __Host-lowry_cookie_choice cookie with the value v1.essential, Path=/, Secure and SameSite=Lax for up to 180 days. It remembers your request and contains no visitor identifier, timestamp or browsing history. It is readable by this website's script so the panel can remember your choice. No preference cookie is written merely because you visit or close the panel. Closing without saving dismisses it for that page only. Essential storage cannot be disabled in the panel; no optional tracking categories are currently used. Saving this preference is not acceptance of our privacy notice or terms. Any future non-exempt technology must remain off until an informed, active choice, with equally accessible refusal and withdrawal.

Your choices

Open Cookie settings in the footer or the cookie-settings button to review this information at any time. Forget saved choice removes __Host-lowry_cookie_choice and shows the notice again without changing your sign-in cookies. An expired, invalid or older preference also shows the notice again. If your browser blocks preference cookies, the panel still works for the current page but your choice may not be remembered on your next visit. You can also use your browser settings to view or delete site cookies and control storage. Blocking necessary sign-in or host-security cookies may affect restricted access. The panel cannot control separate Cloudflare security or network-reporting settings. For other information about personal data, read our privacy policy.