Cookie Policy
Montclare uses storage needed for application forms and signed-in Private Client Access. The Montclare application does not load advertising or third-party analytics scripts.
Application-session cookie
The mcl_application cookie binds an application or enquiry to its browser session and helps protect submissions. It is HTTP-only, SameSite Strict, restricted to /api endpoints and expires after 24 hours. It uses the Secure attribute on HTTPS. It does not contain the answers entered into the form.
Optional application drafts
If you select Save my progress, application answers are saved in local storage on your device. The form treats the draft as expired after seven days and provides a control to clear it earlier. Anyone with access to that browser may be able to read a saved draft. Declining this option does not prevent you completing the application.
Invitation and sign-in
An invitation link may be held temporarily in this tab’s session storage so it can be activated after sign-in. It is removed after successful activation. The __Host-mcl_session cookie identifies an authenticated session. It is HTTP-only, Secure on HTTPS, SameSite Lax and restricted to this hostname. A session expires after 12 hours or one hour of inactivity. Signing out revokes that session; changing or resetting a password revokes previous account sessions. Essential hosting infrastructure may also set cookies to provide the website. Portal records and uploaded documents are stored on the server.
Your controls
You can clear cookies and site storage through your browser settings. Doing so may sign you out, remove a saved draft or require a new application session. Advertising and optional analytics will not be added without the relevant information and controls. Marketing email and text choices concern messages, not cookie permission.