skip to primary navigationskip to content

Privacy and cookie policies


Standard Apache logs are kept, recording certain details of every HTTP[S] interaction. These logs are deleted after 28 days. Beyond that point only anonymous statistical data is kept for reporting purposes.

The University reserves the right to keep log files if an investigation is under way for the purposes of assisting with the investigation.

Details stored in the standard Apache log files:

  • Internet address of connecting client
  • Authenticated user ID
  • Time stamp
  • Request made
  • Server's response code and number of bytes returned
  • The 'user agent' string identifying the make of client


Cookies are only used on this site if a user logs in with the Raven/Shibboleth authentication system. These are all session cookies, which expire at the end of the browsing session. See the Raven privacy and cookie policy for further details.

CookieReturned toFunction
_shibsession_... Authentication
Ucam-WLS-Session Authentication
JSESSIONID Authentication
_idp_session Authentication
_ZopeId or Session management

Access to personal data

For the purpose of the UK Data Protection Act 1998, the 'Data Controller' for the processing of data collected by this site is the University of Cambridge, and the point of contact for subject access requests is the University's Information Compliance Office.