01 · What is used
A PHP session cookie.
The server creates a random session identifier when a visitor uses a protected form or when an administrator signs in. The cookie does not contain prayer text, enquiry content, passwords or marketing preferences.
02 · Why it is needed
Security and continuity.
The session cookie helps prevent forged form submissions, remember a secure success state, enforce submission throttling and maintain an authenticated administrator session. It is configured as HTTP-only, SameSite=Lax, limited to cookies, and sent securely when HTTPS is active.
03 · Your control
It expires when the browser session ends.
You can remove or block cookies through your browser settings. Protected forms and administrator access may not work correctly without the essential session cookie.
04 · Future changes
New tracking requires a new review.
The current application does not install advertising or visitor-analytics cookies. If the church later adds non-essential analytics, embedded tools or advertising technology, this notice and the consent approach should be reviewed before that technology is activated.
For more information, read the Privacy Notice or send a privacy enquiry.