Skip to main content

NHS App cookies policy

Version 2.2, 16 January 2020

Information:

Minor update for a new setting to switch optional analytic cookies on or off.

NHS Digital ("we" or "us") uses cookies to deliver the NHS App ("NHS App").

The information set out in this policy is provided in addition to our privacy policy and should be read alongside it.

We put small files called cookies on your device (for example, your phone).

Cookies are widely used to make websites and apps work, or work more efficiently, as well as to provide services and functionalities for users.

We use two types of cookie on the NHS App:

  • cookies that we need to put on your device for the NHS App to work ("strictly necessary cookies")
  • optional analytic cookies to collect information about how the NHS App is used to help us improve it (sometimes referred to as "performance cookies")

We ask you to accept our cookies policy when you accept the NHS App terms of use and privacy policy. In doing so, you agree to let us put the strictly necessary cookies on your device.

The first time you log in to the NHS App we also offer you the choice of accepting or declining the optional analytic cookies that help us improve its performance.

Important

If you're using a public computer, make sure you:

  • log out of the NHS App online
  • delete any health record documents you may have downloaded
  • delete any cookies from the web browser

Strictly necessary cookies we need to set

The strictly necessary cookies we need to put on your device for the NHS App to work are:

Name Purpose Expires
nhso.session NHS App session cookie. This is set when you log in to the app. It makes temporary use of your personal information previously collected by us, only holding information for the duration of your session. It is required by various features in the app and is deleted when your session ends. When you close the app or sign out
NHSO-Session-Id NHS App session cookie. This is set when you log in to the app. It makes temporary use of your personal information previously collected by us, only holding information for the duration of the session. It's used to ensure you're securely logged in and your information is secure, and is deleted when your session ends. When you close the app or sign out
nhso.auth NHS App session cookie. This is set before you log in to the app. It contains information used for login purposes. It does not collect, store or make use of any of your personal information and cannot be used to identify you. When you sign into the app
nhso.terms NHS App session cookie. This is set when you sign into the app. It temporarily stores whether you have accepted the conditions of use and optional analytic cookies, to improve the performance of the NHS App. It does not collect, store or make use of any of your personal information and cannot be used to identify you. When you close the app or sign out
BetaCookie NHS App persistent cookie. This is set before you go through the NHS login registration process. It captures an identifier for your GP practice and whether they currently offer a full set of GP services. It does not collect, store or make use of any of your personal information and cannot be used to identify you. 365 days

Optional analytic cookies

We use software called Adobe Analytics and Hotjar to collect performance data about how people use the NHS App. The information helps us to improve the app.

Your "client IP address" is transmitted to Adobe Analytics and Hotjar as part of performance data but is not stored. This means we cannot identify you. No other personal information (for example, your name or address) is collected.

We do not allow Adobe or Hotjar to use or share our analytics data.

You can choose whether to allow optional analytic cookies in the NHS App. To change your preference:

  1. Go to "Settings" (the cog icon).
  2. Select "Cookies".
  3. Switch "Allow optional analytic cookies" on or off.

When you change your preference, it applies to all the devices on which you use the NHS App.

Cookies set by Adobe Analytics

Name Purpose Expires
s_cc This lets us know if your browser allows cookies. When you close your browser
s_sq This lets us know what the previous link you clicked on was. When you close your browser
s_vi This lets us know your unique visitor ID time/date stamp that tells us the time and date you first visit our platform. 2 years
s_fid This lets us know your unique visitor ID time/date stamp. It's only used if the s_vi cookie is blocked by your browser. 2 years
AMCV_###@AdobeOrg This lets us know your unique visitor ID when you use our platform. 2 years
AMCVS_###@AdobeOrg This is set when you first log in. It lets us know your unique visitor ID each time you use our platform. 2 years
gpv This stores information which lets us know how many of our pages you visited. The end of the session.
ss_ppv This stores information which lets us know how far you scroll down the page. The end of the session
s_tp This lets us know how much of the page you viewed. The end of the session
s_getNewRepeat This lets us know if you're logging in for the first time. 1 month

Cookies set by Hotjar

Name Purpose Expires
hjid Hotjar cookie. This cookie is set when a visitor first lands on a page with the Hotjar script. It is used to persist the Hotjar User ID, unique to that site on the browser. This ensures that behaviour in subsequent visits to the same site will be attributed to the same user ID. 365 days
hjClosedSurveyInvites Hotjar persistent cookie. This cookie is set once a visitor interacts with a survey invitation modal pop-up. It's used to ensure that the same invite does not reappear if it's already been shown. 365 days
hjDonePolls Hotjar persistent cookie. This cookie is set once a visitor completes a poll using the feedback poll widget. It's used to ensure that the same poll does not reappear if it's already been filled in. 365 days
hjMinimizedPolls Hotjar persistent cookie. This cookie is set once a visitor minimises a feedback poll widget. It's used to ensure that the widget stays minimised when the visitor navigates through your site. 365 days
hjDoneTestersWidgets Hotjar persistent cookie. This cookie is set once a visitor submits their information in the recruit user testers widget. It's used to ensure that the same form does not reappear if it's already been filled in. 365 days
hjMinimizedTestersWidgets Hotjar persistent cookie. This cookie is set once a visitor minimises a recruit user testers widget. It's used to ensure that the widget stays minimised when the visitor navigates through your site. 365 days
hjIncludedInSample Hotjar persistent cookie. This session cookie is set to let Hotjar know whether that visitor is included in the sample used to generate funnels. 365 days
hjShownFeedbackMessage Hotjar persistent cookie. This cookie is set when a visitor minimises or completes incoming feedback. This is done so the incoming feedback will load as minimised immediately if they navigate to another page where it's set to show. 365 days

Your cookie choices

The majority of devices and browsers will allow you to alter the settings used for cookies and disable and enable them as you require.

You can select your cookie preferences so that you do not get any cookies (except strictly necessary cookies) if you prefer not to receive them.

You can also delete the cookies already on your device, and you can set your browser or device to prevent them being placed.

Please be aware that if you set your preferences to not allow cookies, it could limit the functionality of the NHS App as it needs the strictly necessary ones to function.

Changes to this cookie policy

Our terms of use, privacy policy and cookies policy may change. We'll inform you and request your continued agreement if we make any significant changes to our privacy policy, cookies policy or terms of use.

Version history

Page last reviewed: 16 January 2020
Next review due: 16 January 2021