OnePlusOne · Policy

Cookies and online tracking

Understand the technologies we use and manage your choices with CookieYes.

Choose a section to read, or expand all sections to view the full policy.

On this page
Expand all sectionsCollapse all sections

1. What this notice covers

OnePlusOne Marriage and Partnership Research (“OnePlusOne”, “we”, “us”) is a charity registered in England and Wales, number 1087994. This notice explains the cookies and similar technologies we use on our websites, our member areas, our online community and our e-learning, what each one does, how long it lasts and how you can control it.

It sits alongside our Privacy Notice, which explains more broadly what we do with personal information and what rights you have.

2. What we mean by cookies and similar technologies

A cookie is a small file a website asks your browser to store. Similar technologies do much the same job by different means, and the rules treat them the same way. They include:

  • local storage, where information is kept in your browser rather than in a cookie file. Some of our member area technologies work this way
  • pixels and tags, which are tiny images or snippets of code that record that something happened, such as a page being viewed
  • scripts, which are pieces of code a page runs, sometimes provided by another organisation

Throughout this notice we use the word cookies as shorthand for all of them.

3. Your choices, and how the rules work

For most cookies we need your consent before we set them. You give or refuse that consent through the cookie banner when you first visit, and you can change your mind at any time using the cookie preferences link on our website.

A small number of cookies do not need your consent, because the law provides narrow exceptions. Those exceptions were changed in February 2026 and now cover:

  • carrying out the transmission of a communication
  • anything strictly necessary to provide a service you have asked for, which includes keeping you logged in, keeping the site secure and preventing fraud
  • collecting information purely to produce statistics about how the service is used, in order to improve it, provided the information is not shared with anyone else except to help us make those improvements, we tell you what we are doing and we give you a simple free way to object
  • adapting how the site looks or works to your preferences, on the same conditions
  • working out where you are in order to send emergency assistance you have asked for

We rely on the transmission and strictly necessary exceptions. We ask for consent for our statistics and marketing technologies. The statistics exception has specific conditions, including limits on purpose and use by service providers; using a third-party provider does not by itself determine whether the exception applies. We do not currently use preference cookies.

Turning cookies off in your browser is not the same as refusing consent here, and it is not how we record your choice. Use the cookie preferences link so that your decision applies on our sites. Browser controls are a useful additional step, but if you block everything, parts of our sites will stop working.

4. Cookies we set without asking, because they are strictly necessary

These keep the site working and secure. They cannot be switched off through the preferences tool, because the site cannot function without them.

4. Cookies we set without asking, because they are strictly necessary

Name

Set by

What it does

Lasts

cookieyes-consent

CookieYes

Stores your cookie choices for this site so we do not ask again

1 year

AADSSO, buid, esctx, SSOCOOKIEPULLED

Microsoft

Keeps you logged in to areas that need an account

Session to 30 days

stsservicecookie, x-ms-gateway-slice

Microsoft

Security when your session is passed between our site and Microsoft's sign-in service

Session

__stripe_mid, __stripe_sid

Stripe

Processes card payments and detects fraudulent transactions

1 year

JSESSIONID, __cf_bm

Vimeo

Keeps video playback working and distinguishes people from automated traffic

Session to 1 day

memberstack, ms_expire, id, _ab, _mf

Memberstack

Controls which parts of the site your account can reach, and passes payment details to Stripe

Session, or cleared after 2 years without use

m

Memberstack

Recognises your device so pages display correctly

2 years

PHPSESSID, SID

Click

Keeps you signed in to our e-learning

Session

MoodleSession, MOODLEID

Moodle

Keeps you signed in to our e-learning and remembers your username. MOODLEID is optional and can be refused

Session

5. Cookies we ask your consent for: statistics

These help us understand how our sites are used so we can improve them. We ask for your consent before setting them, and you can withdraw consent at any time using CookieYes cookie settings. These technologies are provided by Google, Microsoft, Vimeo or Memberstack.

5. Cookies we ask your consent for: statistics

Name

Set by

What it does

Lasts

_ga and _ga*

Google Analytics

Recognises your browser so we can count visits and see which pages are used

2 years

_gid

Google Analytics

Same purpose, over a shorter period

1 day

_gat

Google Analytics

Limits how often data is sent

1 day

collect

Google Analytics

A pixel that sends information about your device and how you arrived at the site

Session

fpc

Microsoft

Recognises your browser to produce usage statistics

30 days

vuid

Vimeo

Records which pages containing video you have viewed

2 years

Memberstack analytics storage

Memberstack

Records how members move through the member area so we can improve it

Session

6. Cookies we ask your consent for: marketing and advertising

These are used to measure how well our advertising works and, in the case of Google, to show our content again to people who have visited our site. This is the group most people care about most, so to be clear about what it means: if you consent, Google can recognise your browser on other websites in its network and we can reach you there. If you do not consent, none of these are set and nothing about your visit is used for advertising.

6. Cookies we ask your consent for: marketing and advertising

Name

Set by

What it does

Lasts

_gcl_au

Google

Measures how well our adverts perform across sites that use Google's advertising services

3 months

ads/ga-audiences

Google

A pixel that lets Google show our content again to people who have visited our site

Session

MicrosoftApplicationsTelemetryDeviceId, MicrosoftApplicationsTelemetryFirstLaunchTime

Microsoft

Sets a device identifier used by Microsoft to track how you interact with Microsoft components on our sites

1 year

We do not sell or rent your information, and we do not allow these providers to use it for their own advertising to you outside our campaigns.

7. Cookies still being classified

Our cookie scanning tool has found a small number of cookies set by Microsoft components on our sites that it has not yet been able to classify. We are not comfortable asking you to consent to something we cannot describe, so we are working through them with the supplier. Until each one is identified and placed in one of the categories above, it is treated as requiring consent and is not set unless you have consented to statistics and marketing cookies. This notice will be updated as each is resolved.

7. Cookies still being classified

Name

Set by

Status

Lasts

nSGt-#

Microsoft

Being identified with the supplier

1 day

RpsContextCookie

Microsoft

Being identified with the supplier

1 day

A/N{39}

Microsoft

Being identified with the supplier

Session

KillSwitchOverrides_enableKillSwitches

Microsoft

Being identified with the supplier

Session

8. How long they last

The duration for each cookie is given in the tables above. Session means the cookie is deleted when you close your browser. Where a technology uses local storage rather than a cookie file, it has no automatic expiry, so we clear it when your account is closed or after 2 years without use, whichever comes first.

Separately, our website analytics data is kept for 14 months at individual level. Aggregate statistics, which cannot identify anyone, are kept for longer so we can compare year on year.

9. Tracking in our emails

Our newsletters and other marketing emails use tracking technologies to record opens and link clicks. These are used to understand what people find useful and identify addresses that no longer engage. Permission to receive marketing messages is separate from permission for non-exempt tracking. Where tracking needs consent, we must obtain it before it is used. You can contact privacy@oneplusone.org.uk about email tracking or unsubscribe using the link in any marketing email. Blocking images may reduce open tracking, but does not necessarily stop link tracking.

10. Cookies set by other organisations, and information leaving the UK

Several of the technologies described here are provided by other organisations, including Google, Microsoft, Stripe, Vimeo, Memberstack and CookieYes. Those organisations are based outside the United Kingdom or store information outside it, so consenting to their cookies means information about your visit is transferred outside the UK.

Where that happens we make sure the information is protected to a standard similar to the protection it has here, either because the UK Government has decided the country concerned provides suitable protection, or by putting an approved contract in place such as the UK International Data Transfer Agreement. Each provider also has its own privacy information explaining what it does with the information it collects.

11. Your rights and how to complain

Where a cookie collects information that identifies you, that information is personal data and you have the same rights over it as over anything else we hold. You can ask for a copy, ask us to correct or delete it, or object to how we use it. Our Privacy Notice explains those rights and how to use them.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at any time. You do not have to come to us first, although the ICO will normally ask you to give us the chance to respond.

12. Contact us

  • Email: privacy@oneplusone.org.uk for anything about your personal information, or info@oneplusone.org.uk for general enquiries
  • Post: Data Protection Officer, OnePlusOne, c/o MHA MacIntyre Hudson, 6th Floor, 2 London Wall Place, London EC2Y 5AU

13. Changes to this notice

We review this notice whenever our websites change and at least once a year, and we re-run our cookie scan as part of that review. Any changes are posted here and take effect from the date they are posted. The version history at the end records what has changed.

14. Related documents

Questions or requests? privacy@oneplusone.org.uk