Our use of cookies

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site.

To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org.

Cyber Springboard only uses cookies where they are essential to allow the site to work. We understand these cookies to fall under the exemptions in PECR described by the ICO. As such, we do not present you with a cookie banner.

If you have a question about our use of cookies, or a recommendation on how to improve this page, please get in touch: hello@cyberspringboard.com

The table below explains the cookies we use, and why we use them.


Cookie Name Purpose
Session ID sessionid Used to allow users to be recognised across requests to the same website within the same session. This cookie is used if you have an account and log-in.
CSRF Token csrftoken Used to prevent Cross-Site Request Forgery (CSRF). This is not a perfect approach, but it is the default approach used by the current web framework. To find out more about mitigating CSRF attacks, we recommend reading the OWASP CSRF prevention cheat sheet.


No cookies are used for analytics purposes.

Cyber Springboard uses a self-hosted version of Plausible Analytics. This is hosted alongside Cyber Springboard on infrastructure in the EU. Plausible provides lightweight and open source web analytics focused on privacy. Plausible uses no cookies and states that it is fully compliant with GDPR, CCPA and PECR. You can read more about Plausible's approach to data on their website, but a key excerpt is reproduced below:

The goal of Plausible is to track overall trends in your website traffic, it is not to track individual visitors. We don't use cookies, we don't generate any persistent identifiers and we don't collect or store any personal or identifiable data. All of the data is aggregated data only and it has no personal information.