Privacy and cookies
The OpenAthens privacy policy is available at https://www.openathens.net/privacy/
This page will cover the cookies and local storage used by our products.
Operational cookies and storage
OpenAthens uses various cookies and similar to maintain sessions and store preferences that are necessary for its operation. None of these contain personally identifiable information.
admin.openathens.net
| Name | Function |
|---|---|
| oaadmin | maintains admin session |
sp | Preference: fields for advanced search |
| cp | Preference: columns in list view |
| oaadmin_cookieconsent_status | cookie consent status |
We use Chameleon to help our users better learn our web application, using interactive product tours built with Chameleon. Chameleon provides an editor to build these tours, and also delivers them inside our application during their interaction. Chameleon does not automatically collect any personally identifiable information and uses data we proactively send to Chameleon for the purposes of helping us deliver the right guidance to the right user at the right time. To learn more about Chameleon's security practices, cookie policies and regulatory compliance, please visit https://www.trychameleon.com/security.
go.openathens.net
No storage is used
login.openathens.net
| Name | Function |
|---|---|
| oaadsid | maintains admin account session |
| oatmpsid | maintains user account session |
| oa2fastate_* | multi-factor authentication state |
| oaselorg | the selected organisation |
| oacorg | last selected brokered connection |
| oalastorg | last used organisation |
| oasamlreqid | Used to store the SAML request ID |
| oasamlreqid | active saml request id |
| ssodebug | whether debug mode is enabled |
| oaorgmap | the saml connector chosen if you map to multiple organisations |
| oaxsrftkn | XSRF seed token for a user |
my.openathens.net
| Name | Function |
|---|---|
| oa-xsrf-token | XSRF seed token |
| oa-session | maintains user session |
| oa_cookieconsent_status | cookie consent status for end-user pages |
| oaadmin_cookieconsent_status | cookie consent status for administrator pages |
We use Chameleon to help our users better learn our web application, using interactive product tours built with Chameleon. Chameleon provides an editor to build these tours, and also delivers them inside our application during their interaction. Chameleon does not automatically collect any personally identifiable information and uses data we proactively send to Chameleon for the purposes of helping us deliver the right guidance to the right user at the right time. To learn more about Chameleon's security practices, cookie policies and regulatory compliance, please visit https://www.trychameleon.com/security.
reports.openathens.net
| Name | Function |
|---|---|
| oa-rui-sess | maintains admin session |
| oaadmin_cookieconsent_status | cookie consent status |
ACCOUNTS_TOTALS_BREAKDOWN AUTHENTICATIONS RESOURCE_USAGE_BREAKDOWN TOP_RESOURCES etc... | selected options such as breakdown type or date range so that you don't have to continually re-select them |
sp.openathens.net
| Name | Function |
|---|---|
| cloudspid | maintains admin session |
| cloudsptoken | XSRF seed token |
| oaadmin_cookieconsent_status | cookie consent status |
wayfinder.openathens.net
| Name | Function |
|---|---|
| wfEntityIDs | entityIDs of previously selected organisation(s) so that you don't have to search each time |
resource.status.openathens.net
| Name | Function |
|---|---|
| c* | cookie consent status |
| ppp* | maintains user session |
| t* | time zone preference |
| l* | language preference |
Service improvement
We also use some tools to monitor how the service is used so that we can improve it. None of these provide us with personally identifiable information.
Google Analytics
Some of our websites use Google Analytics, a web analytics service provided by Google, Inc. ("Google"). The information generated by the cookie about your use of our website (IP addresses are discarded at local collection centres after determining data such as country) will be transmitted to and stored by Google. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Further information about Google’s privacy policy may be obtained from http://www.google.com/privacy.html.
Matomo
Some of our websites use Matomo to gather usage information which helps us understand how the service is being used and identify areas for improvement. You can find out more about Matomo on their website: https://matomo.org/about. Matomo respects any 'do not track' settings in your web browser.
Hotjar
We use Hotjar in order to better understand our users’ needs and to optimise this service and experience. Hotjar is a technology service that helps us better understand our users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables us to build and maintain our service with user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behaviour and their devices. This includes a device's IP address (processed during your session and stored in a de-identified form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), and the preferred language used to display our website. Hotjar stores this information on our behalf in a pseudonymised user profile. Hotjar is contractually forbidden to sell any of the data collected on our behalf. For further details, please see the ‘about Hotjar’ section of Hotjar’s support site: https://help.hotjar.com/hc/en-us/sections/115003204947