Collection navigation

Cookie Policy

Last updated: 24 September 2026

1. Introduction

This Cookie Policy explains how Tactuum Ltd ("Tactuum", "we", "us", "our") uses cookies and similar technologies on Quris (the "Platform"), available at https://quris.com, including the organisation sites hosted on it. Please read it alongside our Privacy Policy.

 

2. What are cookies?

Cookies are small text files that a website places on your device when you visit it. They are widely used to make websites work, to make them work more efficiently, and to give information to the site owner. This policy uses the word "cookies" to cover similar technologies too, such as browser local storage.

 

3. How we manage cookie consent

We use CookieControl by Civic UK Ltd (civicuk.com) to manage cookie consent. When you first visit Quris, a banner lets you accept or reject analytics cookies. Analytics cookies are not set unless you accept them.

You can change your choice at any time by clicking the CookieControl icon shown in the corner of every page. If you withdraw consent, we delete the analytics cookies set on the quris.com domain. Your choice is remembered for 90 days, after which we will ask again.

 

4. Categories of cookies we use

Category

Purpose

Consent required?

Strictly necessary

Needed for the Platform to work and stay secure. Examples: routing your visit to the same server, protecting forms against forgery, keeping you signed in, and remembering your cookie choices and display preferences. These cannot be switched off.

No

Analytics

Help Tactuum, and the organisation whose pages you are viewing, understand how the Platform is used so it can be improved. We use Google Analytics 4.

Yes

We do not use advertising or targeting cookies.

 

5. Specific cookies used

5.1 Strictly necessary: all visitors

Name

Provider

Purpose

Expiry

CookieControl

Tactuum (via CookieControl)

Stores your cookie consent choices

90 days

ARRAffinity, ARRAffinitySameSite

Microsoft Azure

Keeps your visit on the same server (load balancing)

End of session

.AspNetCore.Antiforgery.*

Tactuum

Protects forms, such as feedback, against cross-site request forgery

End of session

 

5.2 Strictly necessary: only if you sign in to restricted content

Name

Provider

Purpose

Expiry

.AspNetCore.Session

Tactuum

Supports the secure sign-in process

End of session (30 minutes idle)

.AspNetCore.Identity.Application

Tactuum

Keeps you signed in to restricted content

End of session, or until you sign out

.AspNetCore.Correlation.*, .AspNetCore.OpenIdConnect.Nonce.*

Tactuum

Secures sign-in with your organisation's Microsoft account

Deleted when sign-in completes (a few minutes)

 

5.3 Strictly necessary: content editors only

These cookies are set only for staff of Client organisations who sign in to the Quris content management system (Umbraco back office).

Name

Provider

Purpose

Expiry

__Host-umbAccessToken

Tactuum (Umbraco)

Holds the editor's short-lived access token for the back office

Until the token expires or you sign out

__Host-umbRefreshToken

Tactuum (Umbraco)

Renews the access token so the editor stays signed in

Until the token expires or you sign out

UMB_UCONTEXT, UMB_UCONTEXT_EXPOSED

Tactuum (Umbraco)

Keeps the editor's back-office session signed in and secure

End of session, or until you sign out

ARRAffinity, ARRAffinitySameSite

Microsoft Azure

Keeps the session on the same server (load balancing)

End of session

 

5.4 Analytics (only with your consent)

Name

Provider

Purpose

Expiry

_ga

Google Analytics

Distinguishes unique visitors

2 years

_ga_<ID>

Google Analytics

Keeps session state for a specific Analytics property

2 years

Client organisations can add their own Google Analytics property to their pages. If you consent, you may therefore see more than one _ga_<ID> cookie, one for each property.

 

6. Third-party content

Some guideline pages embed content chosen by the Client organisation, such as YouTube videos (served from youtube-nocookie.com where possible), Microsoft Forms, or Jotform forms. These providers may set their own cookies when you play or use that content. They are responsible for those cookies under their own privacy and cookie policies.

The Platform also loads icons from Font Awesome. This service does not set cookies but receives your IP address when icons load.

 

7. Managing cookies through your browser

As well as the CookieControl icon, most browsers let you view, delete, and block cookies in their settings. Blocking strictly necessary cookies may stop parts of the Platform from working, including signing in and submitting feedback.

 

8. Changes to this policy

We may update this Cookie Policy from time to time, for example to reflect changes in the cookies we use. We will post the revised version on this page with an updated "Last updated" date.

 

9. Contact us

Tactuum Ltd 280 St Vincent Street, Glasgow G2 5RL, United Kingdom