Use of cookies by Health Data Research UK
Our website uses cookies
This cookie policy contains information on who we are and how we use cookies or similar technologies of our website. This should be read in conjunction with our Privacy Policy which details how and why we collect and use personal data.
Who we are
Health Data Research UK (HDR UK) is a limited company registered in England and Wales under company number 10887014. Its registered office is at 215 Euston Road, London, England, NW1 2BE. HDR UK is the controller and responsible for your personal data. This cookie policy only relates to your use of this website: https://healthdatagateway.org/ .
Navigational logging and link decoration
We use navigational logging and link decoration technology to understand how users move between pages and sub-domains within our services. These technologies may attach or preserve non-personal identifiers within links and URLs to help us analyse user journeys, understand traffic flows, attribute navigation paths, and improve website performance and user experience. Information collected through these technologies is used only for statistical and analytical purposes.
We use navigation tracking via query identifiers (Query IDs) and pseudonymised user identifiers (User IDs) passed through URL parameters (link decoration). This information is used to understand user journeys across websites and sub-domains by associating searches with subsequent page navigation. This enables aggregated analytics on how users discover and access content, helping improve search functionality and user experience.
Cookies
A cookie is a very small text document, which often includes an anonymous unique identifier. Cookies are created when your browser loads a particular website. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website’s server. Find out more about the use of cookies generally at www.allaboutcookies.org.
Most internet browsers allow you to manage cookie settings or to delete them. Methods vary for doing so, but you can see information about managing cookies at the following links:
Cookies we use
We use the following cookies a variety of cookies on our website including:
Strictly necessary cookies
These cookies are necessary for core website functionality and needed to provide the Gateway and the Cohort Discovery service to you e.g. security or detecting technical issues. These cannot be switched off.
Statistical cookies
These cookies allow us to track information about use of our website e.g. count visits, traffic sources, page loading speed.
Third party cookies
Your use of our website may result in some cookies being stored that are not controlled by us. This may occur when our website includes content displayed from a third party website, for example, YouTube. You should review the privacy and cookie policies of these services to find out how these third parties use cookies and whether your cookie data will be transferred to a third country.
Table of cookies
| Cookie and Similar Technologies Used | Type of Cookie | Lifespan | Purpose |
| OptanonAlertBoxClosed | Strictly Necessary | 1 year | Records that the cookie banner was displayed and closed. This is independent of the recorded consent choices. |
| OptanonConsent | Strictly Necessary | 1 year | Records your cookie consent preferences and the choices you made through the cookie consent banner. |
| hdr-session-id (Gateway) | Strictly Necessary | Session | Random identifier created on your first visit and sent with requests to the Gateway API so requests in one browsing session can be linked. Contains no personal information. |
| token (Gateway and CDS) | Strictly Necessary | Session. The login itself lasts 24 hours | Authentication token that keeps you signed in and authorises requests to the Gateway and Cohort Discovery. Set when you sign in through your identity provider. |
| gateway_api_2_session (Gateway and CDS) | Strictly Necessary | 2 hours | Session cookie set by the Gateway API to maintain session state during sign-in and API requests. |
| h_d_r_u_k_cohort_discovery_a_p_i_session (CDS) | Strictly Necessary | 2 hours | Session cookie set by the Cohort Discovery service to maintain your session while you use it. |
| XSRF-TOKEN (CDS) | Strictly Necessary | 2 hours | Security token that protects against cross-site request forgery, so requests to the service can only come from pages you are actually using. |
| gw-post-login-action (Gateway) | Strictly Necessary | Session | Remembers what you were doing before being asked to sign in (for example saving a search or starting an access request) so it can be completed after login. Deleted once used. |
| surveySession (Gateway) | Functional | 90 days after feedback is submitted; 5 days if dismissed | Records whether you’ve responded to or dismissed the feedback pop-up so it isn’t repeatedly shown. |
| view-type (Gateway) | Functional | Session | Remembers your chosen layout for search results. |
| leftNavOpen (Gateway) | Functional | Session | Remembers whether the account-area side menu is open or collapsed. |
| queryBuilderGuidanceRead (CDS) | Functional | 1 year | Records that you’ve dismissed the query builder guidance panel so it isn’t shown again. |
| query-builder-preferences (CDS, localStorage) | Functional | Until cleared by the user | Remembers the datasets you’ve selected in the query builder so they’re still selected when you return. |
| ui-preferences (CDS, sessionStorage) | Functional | Until the browser tab is closed | Remembers interface notices you’ve dismissed during your visit. |
| publication-data (Gateway, localStorage) | Functional | Until the publication form is completed | Temporarily holds publication details while you add a publication to your profile, then is removed. |
| currentPage / previousPage (Gateway, sessionStorage) | Functional | Until the browser tab is closed | Records the page you’re on and the one you came from (including any search terms in the address) so navigation within the site works correctly. |
| _ga | Performance | About 13 months (400 days) | Google Analytics: distinguishes users for aggregated website usage statistics, across the Gateway and CDS. |
| _ga_* | Performance | About 13 months (400 days) | Google Analytics 4: maintains session state and distinguishes sessions for analytics and measurement. |
| YSC, VISITOR_INFO1_LIVE, VISITOR_PRIVACY_METADATA, __Secure-YNID, __Secure-ROLLOUT_TOKEN (youtube.com) | Third Party | YSC: session. Others: about 6 months. | Set by embedded YouTube videos. Used for video playback and, with your consent, advertising personalisation and measurement. |
| __Secure-ENID, SEARCH_SAMESITE (google.com) | Third Party | ENID: about 13 months. SEARCH_SAMESITE: about 6 months. | Set by Google when a YouTube video loads. Used to remember preferences and, with your consent, advertising personalisation, plus security protections. |
You may access and change your cookie preferences at any time by clicking the button below.