Legal
Cookie Policy
What ScaffoldOptix stores on your device — which is less than most sites, and none of it for advertising.
Version 1.0 · Last updated 23 September 2026
1. About this policy
This policy explains how we use cookies and similar technologies on our websites and in our applications.
It applies to scaffoldoptix.co.uk and to the ScaffoldOptix application.
It should be read with our Privacy Policy.
2. The short version
Our marketing websites set no cookies at all. Our visitor measurement is cookieless. Our applications set only the cookies needed to keep you signed in. We run no advertising or marketing trackers anywhere, on any site or in any product.
The rest of this policy sets out the detail, and names every cookie.
3. What cookies are
Cookies are small text files placed on your device when you visit a website. They allow the site to recognise your device, remember your preferences and understand how the site is used. Similar technologies include local storage and session storage, which hold data in your browser but — unlike a cookie — never travel to the server.
First-party cookies are set by us. Third-party cookies are set by another organisation whose service we use. We set no third-party cookies.
4. The legal position
Under the Privacy and Electronic Communications Regulations 2003 (PECR), consent is required before storing information on, or reading information from, your device — unless doing so is strictly necessary to provide a service you have expressly requested.
Two consequences follow, and they are why our sites carry a notice rather than a consent banner with an accept-or-reject choice.
- Keeping you signed in is strictly necessary to provide the application you asked for, so those cookies do not require consent.
- Our visitor measurement stores nothing on your device and reads nothing from it, so PECR is not engaged. We process the limited technical data involved on the basis of our legitimate interest in understanding how our sites are used.
We set no cookie that would require consent. If that changes, we will ask for consent before setting it, and rejecting will be as easy as accepting.
5. This website
This site sets no cookies. It stores one item in your browser's local storage:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| scaffoldoptix.cookie-notice | Local storage | Records that you have dismissed the notice pointing at this policy, so it is not shown again | Until you clear your browser storage |
It holds a single character and is never sent to our server. You can clear it through your browser's site data settings, and the notice will simply appear again.
Visitor measurement
We measure page views using Vercel Web Analytics. It sets no cookie, stores no identifier on your device, and does not track you across other websites. It derives a rotating, non-reversible identifier from your request in order to count unique visits in aggregate, and that identifier cannot be used to recognise you on a later visit or on another site.
6. Our applications
When you are signed in to one of our products, the following cookies are set by our identity provider. All are first-party, strictly necessary, and carried over HTTPS with the Secure attribute in production.
| Cookie | Purpose | Duration |
|---|---|---|
| nile.session-token (and __Secure-nile.session-token) | Keeps you signed in. Without it you cannot use the application. | The session |
| nile.csrf-token (and __Host-nile.csrf-token) | Protects against cross-site request forgery on sign-in and account actions | The session |
| nile.callback-url (and __Secure-nile.callback-url) | Returns you to the page you were trying to reach after signing in | The session |
| nile.user-id | Identifies the signed-in user to the application | The session |
| nile.tenant-id | Identifies which organisation's data you are working in | The session |
Signing out clears every one of them. Some products also store interface preferences — such as whether a list is shown as cards or a table — in local storage. That is strictly necessary to provide the interface you asked for, stays in your browser, and holds no personal data.
We run no advertising or third-party marketing trackers inside the applications. This is deliberate: several of our products hold records about children, tenants, patients and workers, and third-party tracking is not appropriate anywhere near them.
7. Email
We do not currently send marketing email and we use no tracking pixels. If that changes, this policy will be updated before we start, and any marketing email will carry an unsubscribe link.
8. Managing cookies in your browser
You can block or delete cookies through your browser settings. Blocking the strictly necessary cookies listed in section 6 will prevent you from signing in to our products. Nothing you block will affect your use of our marketing sites, because they set nothing.
- Chrome: Settings → Privacy and security → Third-party cookies
- Safari: Settings → Privacy
- Firefox: Settings → Privacy & Security
- Edge: Settings → Cookies and site permissions
Do Not Track and Global Privacy Control
Browsers may send a Do Not Track or Global Privacy Control signal. We do not set any cookie or tracker that either signal is designed to stop, so there is nothing for us to change in response to one. If we ever introduce a non-essential cookie, we will honour Global Privacy Control as a valid objection.
9. Changes
We may update this policy as our sites change. The current version is always published here with a revised date.
10. Contact
Questions about this policy: privacy@optixgroup.co.uk
You can complain to the Information Commissioner's Office at ico.org.uk or 0303 123 1113.