Privacy

Privacy

Cookies

We use a small number of cookies to keep you signed in and to carry a message from one page to the next. There is nothing here to opt into, so there is no banner and no preferences to manage.

Categories

• Strictly necessary — required for the site to function. Always on. session_id keeps you signed in and holds a random identifier, nothing about you. flash_* carries a validation error or a confirmation across a redirect and expires within five minutes. Both are HttpOnly and signed, so page scripts cannot read them.

• Analytics — anonymous, first-party and cookie-free. We count page views and how features are used so we can improve EcoForge. With each count we store the page, the site that sent you, any campaign tags in the link, your device type and browser family, whether you were signed in, and roughly how long you stayed and how far you scrolled.

  To tell visits apart for a single day we hash your IP address and browser details with a random key that is deleted once that day is over, so the result can't be traced back to you or linked across days. Nothing is stored on your device for this.

  We never store your IP address, your browser's full details, your account, your team or anything you type. We keep these counts for 13 months on our own servers, and no third party is involved. There is no session replay, no advertising and no third-party tracker.

If you ask us to get in touch

The form on our home page uses double opt-in. Submitting it does not put you on a list: we email the address you gave, and nothing counts as a request from you until you click the link in it.

The one exception is when you're signed in to EcoForge and give the address you signed in with. Signing in already proved that address is yours, so we skip the confirmation email and pass your request straight to the EcoForge team, with the name of your team and its plan attached. Any other address still gets the link first. Either way, a request sent while you're signed in is marked with the name of your team.

That link expires after 72 hours, and we delete the unconfirmed details a week after that, automatically. If somebody else typed your address into the form, ignoring the email is enough. To have anything removed sooner, email v.sena@sheffield.ac.uk.

If you're part of a team

We keep a record of changes to each team, such as who was invited, whose role changed and who left, with the email addresses involved, and we delete each entry automatically after 24 months.