Cookie register
This cookie register applies only to the websites on www.ucl.ac.uk that we operate through our central Drupal platform.
Necessary cookies
| Name | Domain | Purpose | Lifespan |
| AWSALBCORS | emea5-foc.lumessetalentlink.com | Used by AWS Application Load Balancer to maintain session stickiness and ensure consistent routing. | 7 days |
| EXPIRE_TIMESTAMP | emea5-foc.lumessetalentlink.com | Stores expiration timestamp for session or authentication validity. | Session or defined by application logic |
| cf_ob_info | www.ucl.ac.uk | Used by Cloudflare to improve page load times and override security restrictions based on the visitor’s IP address. Does not store personal data. | Session |
| cf_use_ob | www.ucl.ac.uk | Used by Cloudflare to manage traffic, improve page load performance, and apply security rules | Typically 1 minute |
| BIGipServer~WWW-WEBDOCS_02_429~pl_www-webdocs_02_429_d05_https | www.ucl.ac.uk | Used by F5 BIG-IP load balancers to maintain session persistence. It ensures that a user’s requests are consistently routed to the same backend server during a session. The cookie contains encoded information about the server’s IP address and port. | Session |
| __cflb | www.speedybooker.com | Used by Cloudflare for load balancing and session affinity. | 1 day |
| cf_clearance | .speedybooker.com | Used by Cloudflare to verify successful CAPTCHA or challenge. | 1 year |
| uclrating | .www.ucl.ac.uk | Used to store user ratings or feedback on UCL content. | ? |
| _GRECAPTCHA | www.google.com | Used by Google reCAPTCHA to distinguish humans from bots and prevent spam. | 6 months |
| __cf_bm | .www.ucl.ac.uk | Set by Cloudflare to manage bot traffic and protect websites from malicious activity. | 30 minutes |
| cookie-agreed-version | .www.ucl.ac.uk | These cookies are used to remember a user’s cookie consent preferences on the UCL website. | 100 days |
| cookie-agreed-categories | .www.ucl.ac.uk | These cookies are used to remember a user’s cookie consent preferences on the UCL website. | 100 days |
| cookie-agreed | .www.ucl.ac.uk | These cookies are used to remember a user’s cookie consent preferences on the UCL website. | 100 days |
Analytics and customisation cookies
| Name | Domain | Purpose | Lifespan |
| __utma | .ucl.ac.uk | Used to distinguish users and sessions. | 2 years |
| __utmc | .ucl.ac.uk | Determines whether the user is in a new session or visit. | Session |
| __utmz | .ucl.ac.uk | Stores traffic source or campaign info explaining how the user reached the site. | 6 months |
| __utmt | .ucl.ac.uk | Used to throttle request rate. | 10 minutes |
| __utmb | .ucl.ac.uk | Determines new sessions/visits. | 30 minutes |
| iutk | .issuu.com | Used by Issuu to track user interaction and document views. | 6 months |
| vuid | .vimeo.com | A Vimeo cookie that assigns a unique ID to a user to collect analytics information about their interaction with embedded Vimeo videos. | 2 years |
| tableau_public_negotiated_locale | public.tableau.com | Stores locale preferences for Tableau Public visualizations. | Session |
| lang | www.speedybooker.com | Stores language preferences for the user. | 1 year |
| basketcurrency_wl_21 | www.speedybooker.com | Stores selected currency for basket transactions. | 1 year |
| CookieTest | www.speedybooker.com | Used to check if the user’s browser supports cookies. | Session |
| YSC | .youtube.com | YouTube session cookie used to track views of embedded videos. | Session |
| __Secure-ROLLOUT_TOKEN | .youtube.com | Used by YouTube to manage feature rollout and experimentation. | 180 days |
| VISITOR_INFO1_LIVE | .youtube.com | Tracks user preferences and interface version for embedded YouTube videos. | 180 days |
| VISITOR_PRIVACY_METADATA | .youtube.com | Stores user privacy and consent settings for embedded YouTube content. | 90 days |
| _ga_35DML57W9V | .ucl.ac.uk | Contains a unique identifier used by Google Analytics 4 to determine that two distinct hits belong to the same user across browsing sessions. | 2 years |
| _ga | .ucl.ac.uk | Google Analytics cookie used to distinguish users. | 2 years |
| _gid | .ucl.ac.uk | Google Analytics cookie used to group user behavior for a single day. | 24 hours |
| nmstat | .ucl.ac.uk | This cookie is used to help record visitors’ use of the website. It is used to collect statistics about site usage such as when the visitor last visited the site. This information is then used to improve the user experience on the website. This Siteimprove Analytics cookie contains a randomly generated ID used to recognize the browser when a visitor reads a page. The cookie contains no personal information and is used only for web analytics. | 1 year |
| _dc_gtm_UA-135026529-2 | .ucl.ac.uk | Used by Google Tag Manager to throttle request rate. | 1 minute |
| lidc | .linkedin.com | LinkedIn cookie used for routing requests to the correct data center. | 24 hours |
| bcookie | .linkedin.com | LinkedIn browser ID cookie for tracking and security. | 2 years |
| li_gc | .linkedin.com | Stores LinkedIn user consent settings. | 6 months |
| UserSettings (Panopto) | ucl.cloud.panopto.eu | Stores user preferences (like layout/sort method) and the last Identity Provider used for sign-in, plus an anonymous ID for analytics. | 2 years |
| __cfvid | embed.ly | Part of content delivery | 4 hours |
| _twpid | .ucl.ac.uk | A tracking cookie used by Twitter (now X) to identify users and support advertising/analytics across websites. | 1 year |
| _ttp [2] | .tiktok.com, .ucl.ac.uk | A tracking cookie used by TikTok to measure ad performance and track user behaviour across websites. | 3 months |
| _tt_enable_cookie | .ucl.ac.uk | A cookie used by TikTok to remember user consent for tracking and enable its cookies/analytics features. | 3 months |
| ttcsid, ttcsid_D61H6ERC77U3O6NDA0J0 | .ucl.ac.uk | A cookie used by TikTok to store a unique session ID for tracking user interactions and attributing conversions. | 3 months |
| _gcl_au | .ucl.ac.uk | A cookie used by Google (Google Ads) to track conversions and measure ad performance. | 2 months |
Advertising and marketing cookies
| Name | Domain | Purpose | Lifespan |
| tld | journey-service.tb.lumesse.com | Likely used for tracking user journey or session across Lumesse TalentLink services. | Session |
| sessionId | journey-service.tb.lumesse.com | Maintains user session state across pages in Lumesse TalentLink. | Session |
| __Secure-YNID | .youtube.com | A Google/YouTube cookie used for advertising purposes to build a profile of user interests and show relevant ads. | 13 months from last use |
| _rdt_uuid | .ucl.ac.uk | A Reddit cookie used for tracking and advertising purposes to understand user engagement and deliver targeted ads. | 89 days |
| _schn2 | .ucl.ac.uk | This cookie name is associated with Snapchat which is used to set a unique ID for the visitor, allowing third party advertisers to target the visitor with relevant advertisements. This pairing service is provided by third party advertisement hubs, which facilitates real-time bidding for advertisers. | 13 months |
| __Secure-YEC | .youtube.com | Used by YouTube to store user preferences and personalize ads. | 13 months |
| PREF | .youtube.com | YouTube cookie used to store user preferences and other information. | 8 months |
| X-AB | sc-static.net | This cookie is set by Snapchat to implement and measure the effectiveness of advertisement content on the website. | 1 day |
| _scid | .ucl.ac.uk | Snapchat pixel unique ID of the user for ad targeting. | 13 months |
| _scid_r | .ucl.ac.uk | Snapchat pixel ID for ad targeting, similar to _scid. | 13 months |
| _fbp | .ucl.ac.uk | Facebook cookie used to deliver advertisement products and track visits across websites. | 3 months |
| sa-user-id | tags.srv.stackadapt.com | These are advertising cookies set by StackAdapt, a programmatic advertising platform. They are used to build a profile of the user’s interests to show relevant ads across different websites. | 1 year |
| sa-user-id-v2 | tags.srv.stackadapt.com | These are advertising cookies set by StackAdapt, a programmatic advertising platform. They are used to build a profile of the user’s interests to show relevant ads across different websites. | 1 year |
| sa-user-id-v3 | tags.srv.stackadapt.com | These are advertising cookies set by StackAdapt, a programmatic advertising platform. They are used to build a profile of the user’s interests to show relevant ads across different websites. | 1 year |
| test_cookie | .doubleclick.net | Used by Google’s DoubleClick to check if the user’s browser supports cookies. | 15 minutes |
| _ScCbts | .ucl.ac.uk | A cookie used by Snapchat to support advertising attribution and measure the effectiveness of ads. | 1 year |
Storage mechanisms used to manage cookie consent
LocalStorage
The UCL Consent Manager uses browser localStorage to persist your privacy preferences:
Key: ucl_privacy_consent
- Purpose: Stores your cookie consent choices across categories (necessary, analytics, marketing, embeds)
- Data stored: JSON object containing consent status for each category and timestamp
- Retention: Persists until you clear your browser data or update your preferences
- Example data: {“necessary”:true,”analytics”:false,”marketing”:false,”embeds”:true,”timestamp”:1234567890}
Key: ucl_privacy_has_consented
- Purpose: Quick flag to indicate if user has made any consent decision
- Data stored: Simple boolean value (“true” or “false”)
- Retention: Persists until cleared or preferences updated
- Used for: Preventing repeated consent banner display
Last updated 19 September 2025
