Cookies on MHRA Account Management, Device Registration and Certificates of Free Sale for medical devices online system Cookies are files saved on your phone, tablet or computer when you visit a website. A cookie is a small file of letters and numbers that we put on your computer if you agree. MHRA Account Management, Device Registration and Certificates of Free Sale for medical devices website uses two cookies. 1. Appian uses CSRF cookies to guard against Cross-Site Request Forgery attacks. These cookies are called appianCsrfToken and appianMultipartCsrfToken. 2. The Tomcat application server that is usually configured with Appian has a JSESSIONID cookie which keeps a user's session active. The JSESSIONID cookie holds a session ID - which is assigned to a User every time the User hits a URL - this expires once the browser window has closed again or the user navigates to another URL (ending the session). We only use strictly necessary cookies on this site. These essential cookies do things like: • remember the notifications you've seen so we do not show them to you again • remember your progress through a form (for example a Device Registration application or Certificate of Free Sale order) These essential cookies do not: • store personal information They always need to be on. Find out more about cookies on GOV.UK