Cookie Policy

Last updated: 17 September 2026

This document is published in English, and the English text is the authoritative version.

1. WHAT THIS PAGE COVERS

This page lists everything this website stores on your device or reads back from it: cookies, and entries in your browser's local storage. It forms part of our privacy policy, and it is where the consent banner sends you.

2. WHAT IS STORED BEFORE YOU DECIDE

One entry, and it is the record of your own choice. Nothing else is written to your device, and none of the analytics tags and none of the marketing tags are loaded until you accept in the banner. Declining is a decision too, and it is stored the same way so you are not asked again on every page.

3. ADVERTISING AND MARKETING

We use one marketing tag, the LinkedIn Insight Tag, and it loads only after you enable marketing cookies in the preference panel. It measures which LinkedIn campaigns lead to a visit and lets us show LinkedIn ads to people who have been here. Declining, or simply leaving the toggle off, means it is never loaded; the analytics toggle does not switch it on, and neither does it switch analytics on. We do not sell what you do here, and we build no advertising profile outside LinkedIn's own system. An earlier version of this site stored a marketing flag that gated nothing; the toggle now governs a real tag, and a marketing choice you saved then is honoured exactly as you recorded it.

4. THIRD-PARTY COOKIES

Google Analytics runs only after you accept analytics, and it runs with IP anonymisation switched on. Google reCAPTCHA runs on the contact and newsletter forms where the anti-spam challenge is enabled, to tell a person from a bot; the forms cannot be protected without it, so it is not covered by the analytics toggle. Both are provided by Google, which sets its own cookies under its own policy. The LinkedIn Insight Tag is provided by LinkedIn, runs only after you enable marketing cookies, and sets its own cookies under LinkedIn's policy. We also run two further analytics tools, and both are covered by the same analytics toggle as Google Analytics. Google Tag Manager is a container we publish measurement tags through, so that a change to what we measure does not need a new release of this site; the container itself sets no cookie, which is why it has no row in the table below, and anything we publish into it is disclosed here in the same release. Microsoft Clarity records how pages are actually used, as session replays and heatmaps, so we can see where the site is confusing rather than only how many people left; it is provided by Microsoft, it sets its own cookies under Microsoft's policy, and it loads only after you accept analytics. Neither is an advertising tool and neither is switched on by the marketing toggle.

5. YOUR BROWSER'S OWN CONTROLS

You can delete cookies and site data in your browser, and that includes the record of your choice, so the banner will ask you again. Blocking all cookies in the browser is not how you switch this site's analytics off selectively: the control for that is the banner, and the button below, which lets you answer analytics and marketing separately.

What this site stores

What this site stores
Name	Provider	Purpose	Category	Storage	Duration
user-preferences	Vulnara (this site)	Records whether you accepted or declined analytics and marketing, so the banner does not ask again on every page	Strictly necessary	Local storage	Until you clear your site data or use the button below
_ga	Google	Distinguishes visitors using a pseudonymous identifier	Analytics, set only after you accept	Cookie	2 years
_ga_<measurement-id>	Google	Keeps the analytics session state for this property	Analytics, set only after you accept	Cookie	2 years
_clck	Microsoft	Keeps the Clarity identifier for this browser so repeat visits are recognised as the same session series	Analytics, set only after you accept	Cookie	1 year
_clsk	Microsoft	Joins the page views of one visit into a single recording	Analytics, set only after you accept	Cookie	1 day
CLID	Microsoft	Records that Clarity has seen this browser before, across the sites that use Clarity	Analytics, set only after you accept	Cookie	1 year
MUID	Microsoft	Microsoft's own browser identifier, which Clarity reads to tie the recording to a device	Analytics, set only after you accept	Cookie	1 year
ANONCHK	Microsoft	Records whether the Microsoft identifier may be used for measurement on this visit	Analytics, set only after you accept	Cookie	10 minutes
MR	Microsoft	Records whether the Microsoft identifier needs refreshing	Analytics, set only after you accept	Cookie	7 days
SM	Microsoft	Keeps the Microsoft identifier consistent across Microsoft domains during the visit	Analytics, set only after you accept	Cookie	Session
_GRECAPTCHA	Google	Anti-spam: scores whether a form submission comes from a person	Strictly necessary, set only where the challenge is enabled	Cookie	6 months
bcookie	LinkedIn	Browser identifier LinkedIn uses to recognise the device across sites carrying the Insight Tag	Marketing, set only after you enable marketing cookies	Cookie	1 year
li_sugr	LinkedIn	Probabilistic identifier LinkedIn uses to match the visit to an advertising audience	Marketing, set only after you enable marketing cookies	Cookie	3 months
lidc	LinkedIn	Routes the request to the LinkedIn data centre that serves it	Marketing, set only after you enable marketing cookies	Cookie	1 day
UserMatchHistory	LinkedIn	Synchronises the visit with LinkedIn Ads so campaign conversions and retargeting audiences can be built	Marketing, set only after you enable marketing cookies	Cookie	30 days

Change or withdraw your choice

The button below forgets the choice stored in your browser and takes you back to the home page, where the consent banner will ask again. Withdrawing consent does not undo analytics or advertising data collected while it was in force, and it affects nothing else on the site.

Contact points

Privacy and data protection requests: [email protected]
General enquiries: [email protected]
Security reports and vulnerability disclosure: [email protected]