Cookie Policy
Last updated: 17 September 2026
This document is published in English, and the English text is the authoritative version.
1. WHAT THIS PAGE COVERS
This page lists everything this website stores on your device or reads back from it: cookies, and entries in your browser's local storage. It forms part of our privacy policy, and it is where the consent banner sends you.
2. WHAT IS STORED BEFORE YOU DECIDE
One entry, and it is the record of your own choice. Nothing else is written to your device, and none of the analytics tags and none of the marketing tags are loaded until you accept in the banner. Declining is a decision too, and it is stored the same way so you are not asked again on every page.
3. ADVERTISING AND MARKETING
We use one marketing tag, the LinkedIn Insight Tag, and it loads only after you enable marketing cookies in the preference panel. It measures which LinkedIn campaigns lead to a visit and lets us show LinkedIn ads to people who have been here. Declining, or simply leaving the toggle off, means it is never loaded; the analytics toggle does not switch it on, and neither does it switch analytics on. We do not sell what you do here, and we build no advertising profile outside LinkedIn's own system. An earlier version of this site stored a marketing flag that gated nothing; the toggle now governs a real tag, and a marketing choice you saved then is honoured exactly as you recorded it.
4. THIRD-PARTY COOKIES
Google Analytics runs only after you accept analytics, and it runs with IP anonymisation switched on. Google reCAPTCHA runs on the contact and newsletter forms where the anti-spam challenge is enabled, to tell a person from a bot; the forms cannot be protected without it, so it is not covered by the analytics toggle. Both are provided by Google, which sets its own cookies under its own policy. The LinkedIn Insight Tag is provided by LinkedIn, runs only after you enable marketing cookies, and sets its own cookies under LinkedIn's policy. We also run two further analytics tools, and both are covered by the same analytics toggle as Google Analytics. Google Tag Manager is a container we publish measurement tags through, so that a change to what we measure does not need a new release of this site; the container itself sets no cookie, which is why it has no row in the table below, and anything we publish into it is disclosed here in the same release. Microsoft Clarity records how pages are actually used, as session replays and heatmaps, so we can see where the site is confusing rather than only how many people left; it is provided by Microsoft, it sets its own cookies under Microsoft's policy, and it loads only after you accept analytics. Neither is an advertising tool and neither is switched on by the marketing toggle.
5. YOUR BROWSER'S OWN CONTROLS
You can delete cookies and site data in your browser, and that includes the record of your choice, so the banner will ask you again. Blocking all cookies in the browser is not how you switch this site's analytics off selectively: the control for that is the banner, and the button below, which lets you answer analytics and marketing separately.
What this site stores
| Name | Provider | Purpose | Category | Storage | Duration |
|---|---|---|---|---|---|
| user-preferences | Vulnara (this site) | Records whether you accepted or declined analytics and marketing, so the banner does not ask again on every page | Strictly necessary | Local storage | Until you clear your site data or use the button below |
| _ga | Distinguishes visitors using a pseudonymous identifier | Analytics, set only after you accept | Cookie | 2 years | |
| _ga_<measurement-id> | Keeps the analytics session state for this property | Analytics, set only after you accept | Cookie | 2 years | |
| _clck | Microsoft | Keeps the Clarity identifier for this browser so repeat visits are recognised as the same session series | Analytics, set only after you accept | Cookie | 1 year |
| _clsk | Microsoft | Joins the page views of one visit into a single recording | Analytics, set only after you accept | Cookie | 1 day |
| CLID | Microsoft | Records that Clarity has seen this browser before, across the sites that use Clarity | Analytics, set only after you accept | Cookie | 1 year |
| MUID | Microsoft | Microsoft's own browser identifier, which Clarity reads to tie the recording to a device | Analytics, set only after you accept | Cookie | 1 year |
| ANONCHK | Microsoft | Records whether the Microsoft identifier may be used for measurement on this visit | Analytics, set only after you accept | Cookie | 10 minutes |
| MR | Microsoft | Records whether the Microsoft identifier needs refreshing | Analytics, set only after you accept | Cookie | 7 days |
| SM | Microsoft | Keeps the Microsoft identifier consistent across Microsoft domains during the visit | Analytics, set only after you accept | Cookie | Session |
| _GRECAPTCHA | Anti-spam: scores whether a form submission comes from a person | Strictly necessary, set only where the challenge is enabled | Cookie | 6 months | |
| bcookie | Browser identifier LinkedIn uses to recognise the device across sites carrying the Insight Tag | Marketing, set only after you enable marketing cookies | Cookie | 1 year | |
| li_sugr | Probabilistic identifier LinkedIn uses to match the visit to an advertising audience | Marketing, set only after you enable marketing cookies | Cookie | 3 months | |
| lidc | Routes the request to the LinkedIn data centre that serves it | Marketing, set only after you enable marketing cookies | Cookie | 1 day | |
| UserMatchHistory | Synchronises the visit with LinkedIn Ads so campaign conversions and retargeting audiences can be built | Marketing, set only after you enable marketing cookies | Cookie | 30 days |
Change or withdraw your choice
The button below forgets the choice stored in your browser and takes you back to the home page, where the consent banner will ask again. Withdrawing consent does not undo analytics or advertising data collected while it was in force, and it affects nothing else on the site.
Contact points
- Privacy and data protection requests
- [email protected]
- General enquiries
- [email protected]
- Security reports and vulnerability disclosure
- [email protected]