Cookie policy

Last updated 1 October 2026

Every cookie and item of browser storage used by the ISMS website and app.

1. What cookies are

Cookies are small files a website stores in your browser. Some are essential for the site to work. Others, such as analytics, are optional and only used if you agree. We also use your browser's local storage in the same way, so it is covered here too.

2. Essential cookies

These keep you signed in and keep your account secure. The site cannot work without them, so they do not need your consent. They are only set when you sign in or use the feature they belong to.

Name	What it does	How long
isms_session	Keeps you signed in to ISMS	12 hours, or until you sign out
isms_2fa	Holds your place during two-factor sign-in	10 minutes
isms_trust	Remembers a device that has passed two-factor sign-in	24 hours
isms_impersonator	Lets an administrator return to their own account after viewing as a partner	4 hours
demo_view	Lets a prospective customer view their demo website	30 days
preview_t	Shows a website preview while it is being edited	1 day

3. Essential local storage

Name	What it does	How long
isms-cookie-consent	Remembers whether you accepted or declined analytics	Until you clear it or change your choice
isms-seen-notifs, isms-dismissed-notifs	Remembers which notifications you have seen inside ISMS	Until you clear your browser
Form recovery	Restores a form you were filling in if your sign-in times out	Until you close the tab

4. Analytics cookies (only with your consent)

If you click Accept on our cookie bar, we use Google Analytics to count visits and see which pages are useful. It is never loaded if you decline or ignore the bar, and it is not used inside the ISMS app itself.

Name	Set by	What it does	How long
_ga	Google	Tells visits apart so we can count visitors	2 years
_ga_<id>	Google	Keeps track of a single visit	2 years

5. Our customers' websites

Organisations that use ISMS can publish their own website with it. Those sites show their own cookie bar under the organisation's name and link to that organisation's own policies, because it decides how its site is used.

6. Changing your choice

You can change your mind at any time. Open the cookie settings below and choose again. If you decline after accepting, we remove the analytics cookies from your browser.

You can also block or delete cookies in your browser settings, but blocking essential cookies will stop you signing in.

Questions about this page: hello@ismsuk.com · GDPR · Privacy policy · Cookie policy · Data processing terms