Working policy

Cookie notice

Structure covers

The decisions this working policy must make clear.

Current local state
What this review build intentionally does and does not activate.
Production inventory
Every necessary, preference, analytics, embedded, form, or portal technology in use.
Consent and signals
How choices, withdrawal, browser signals, and regional requirements are handled.

1. Current review build

Google Analytics is configured for optional use; Microsoft Clarity is configured for optional use. Where available, each requires its own permission. Cookie preferences in the footer provides separate controls. Both services are excluded from inquiry, profile, privacy-request, transition, and policy pages.

These pages remain working policy content. Final notices must reflect the verified production technologies, settings, and responsible entities.

2. Necessary technology and preference storage

The site saves your choices in a first-party cookie named relevane_cookie_consent for 180 days. It records the choice version, separate Google Analytics and Microsoft Clarity permissions, and when the choice was made. It does not contain your name or email address. Deleting it causes the site to ask again when optional tracking is available.

Security and form technologies, including Cloudflare Turnstile, require a separate verified inventory. The final notice must identify their actual storage, providers, purposes, domains, and durations; optional tracking controls do not disable necessary security checks.

3. Proposed analytics and replay inventory

Google Tag Manager manages the two optional services and loads only when an eligible service has permission. Google Analytics 4 measures visits to selected public information pages. Microsoft Clarity records page interactions for session replay and heatmaps to help improve usability. Advertising, remarketing, form tracking, and visitor identification are outside the proposed configuration.

Google Analytics may use first-party _ga and _ga_* cookies to distinguish browsers and maintain measurement state. Microsoft Clarity may use first-party _clck and _clsk cookies to retain browser preferences and connect activity within a session. Microsoft's inventory also lists CLID, ANONCHK, MR, MUID, and SM for some configurations; verify which are actually used with advertising consent denied.

Before activation, verify actual cookie names, domains, providers, lifetimes, request destinations, and collected data. Vendor cookie lifetimes and retained analytics or recordings are separate from the 180-day preference cookie. Microsoft's published retention is 30 days for recordings, with labeled or favorited recordings and heatmap data retained for up to 9 months; confirm the applicable service settings and handling before publishing the final notice.

5. Browser privacy signals

This implementation keeps both optional services off when the browser sends Global Privacy Control, including when an older choice allowed them. Advertising consent remains denied. This behavior is a product decision; the final notice still requires a jurisdiction-specific review of sale, sharing, targeted advertising, other browser signals, and applicable opt-out rights.

6. Cloudflare Web Analytics without cookies

Cloudflare Web Analytics is planned for aggregate traffic and page-performance measurement. Cloudflare states that this service does not use cookies or local storage and does not fingerprint visitors. It measures page views, referrals, and loading performance rather than recording sessions.

When enabled through Cloudflare, this measurement runs separately from Google Analytics and Microsoft Clarity. Accept all, Reject all, and the individual choices in Cookie preferences control those two services; they do not enable or disable Cloudflare Web Analytics. The site's Global Privacy Control handling and excluded-page rules for those services do not control Cloudflare's separately injected script.

See the privacy notice for the proposed Cloudflare data categories and review requirements. Cloudflare hosting, security, and Turnstile are separate technologies; Web Analytics being cookieless does not mean every Cloudflare service is cookieless.

Provider references: Google privacy policy, Microsoft privacy statement, Clarity cookie inventory, Clarity retention, Cloudflare privacy policy, and Cloudflare Web Analytics.