InForm Rugby home

Cookies and external media / Cookies en externe media

Updated 13 October 2026. The public homepage uses local assets and has no advertising or audience-analytics tags. We explain necessary storage here instead of asking for consent that is not required for those functions.

Necessary storage

• InForm session cookie (“session”): keeps the signed-in account context, anti-forgery protection and request/receipt references. Authenticated sessions have an eight-hour lifetime, refreshed through use; anonymous request cookies are browser-session cookies. It is HttpOnly, SameSite=Lax and Secure on HTTPS deployments. The cookie contains no password or payment-card data.
• Auth0 authentication: the sign-in page uses provider-managed storage for authentication and security. The app’s sign-in transaction is short-lived (ten minutes). Auth0’s own login notice applies on that separate service.
• Browser session storage: remembers review navigation/playback choices and the YouTube choice in this tab. It is not used for advertising. Review state ends when the tab’s session storage is cleared; browsers may restore a previous tab session.
• Stripe: payment and billing-portal pages open only when you choose those functions. Stripe uses its own storage for payment and fraud prevention under its privacy and cookie notices.

Optional YouTube

Embedded players, video previews and automatic duration detection remain off until you allow YouTube. We use privacy-enhanced player hosts where supported, but the player API still contacts Google, and cookies or local storage may be used once enabled. Google receives your IP address, device/browser details and video-related activity, and may process information outside the EEA. Its policy covers playback, security, measurement and personalisation. Provider storage lifetimes vary and are described in Google’s cookie policy.

“Allow YouTube” and “Keep YouTube off” are equally available. Refusing leaves other features and local-video work available. Consent lasts for this tab’s session and can be changed below or from any footer. Revoking reloads the page to stop existing players; it cannot remove storage already placed on Google’s domains. You can clear that storage using your browser controls.

Media privacy choices

External links

Google Maps venue/directions links open only when clicked; no map is embedded. Opening an external provider takes you to its service and policies. We do not infer consent from scrolling, silence or accepting general terms. If optional analytics or marketing tools are introduced later, they must remain blocked until an appropriate prior choice is offered.