Cookie Notice
Last updated: 20 July 2026
We use strictly necessary cookies to run the service, and two optional categories, analytics and advertising, that are set only if you consent to them via the cookie banner. Each optional category is off by default and can be accepted or rejected independently.
Cookies we use
The table below lists the main cookies. The analytics and advertising cookies are set only after you consent to those categories; the rest are strictly necessary. Names and durations for cookies set by Google, Clerk, and Cloudflare are controlled by those providers and may change; you can see the exact cookies set on your device at any time in your browser's developer tools.
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| __client, __session | Clerk | Identify your browser to the authentication provider and keep you signed in. | Essential | Session to persistent, managed by Clerk |
| __client_uat, __client_uat_<id> | Clerk | Record your sign-in state so the app knows whether you are authenticated. The suffixed variant is specific to our production authentication instance. | Essential | Session, managed by Clerk |
| __clerk_environment | Clerk | Stores the authentication configuration needed to load sign-in. | Essential | Session |
| __cf_bm | Cloudflare (via Clerk) | Bot management on the authentication service: tells human traffic from bots to protect sign-in. Set on the clerk subdomain. | Essential | ~30 minutes |
| _cfuvid | Cloudflare (via Clerk) | Identifies trusted traffic for rate limiting and security on the authentication service. No analytics or cross-site tracking. | Essential | Session |
| dp-cookie-consent-v2 | The Risk Register | Remembers your cookie choices. Stored in your browser's local storage rather than a cookie; persists until you clear it. | Essential | Until cleared |
| _ga | Google Analytics | Distinguishes unique visitors. | Analytics | 2 years |
| _ga_SY3Y5BQV8E | Google Analytics | Maintains analytics session state for this site. | Analytics | 2 years |
| _gcl_au | Stores ad-click information for conversion measurement (Google Ads link). | Advertising | 90 days | |
| NID, IDE and similar | Set by Google on its own domains to associate your visit with your Google account for Google signals and ads personalisation, where you have allowed advertising and are signed in to Google. | Advertising | Up to ~13 months |
Essential cookies
Set by our authentication provider (Clerk) to keep you signed in and to protect your session. Clerk's sign-in service runs behind Cloudflare, which sets its own strictly necessary cookies on the clerk subdomain for bot protection and rate limiting. These are required for the service to function and cannot be disabled. None of them are used for analytics or advertising.
Analytics cookies (optional)
With your consent, Google Analytics sets cookies to help us understand how the website is used, for example which pages are visited and roughly where visitors come from, with IP addresses anonymised. No analytics data is collected unless you allow the analytics category in the cookie banner.
Advertising and Google signals (optional)
If you allow the advertising category, we enable Google's advertising features:
- Google signals. For visitors who are signed in to a Google account and have allowed ads personalisation in their Google settings, Google may associate this site's usage data with Google's information about them across devices, and with data such as location, search and YouTube history, and partner sites, to support cross device measurement and ads personalisation.
- Ads personalisation and audience sharing. We may share audiences and key events with our linked Google Ads account so that we can measure conversions and show relevant advertising.
- User-provided data. Where enabled, consented data may be shared with Google in hashed form to improve measurement and audience features.
None of this happens unless you allow the advertising category. You can also control how Google personalises ads to you through your Google account's Ad settings and review the activity Google associates with your account at myactivity.google.com.
International transfers
Google is based in the United States and may process this data there. Where data leaves the UK or EU it is protected by the UK Extension to the EU-US Data Privacy Framework, the EU-US Data Privacy Framework, or Standard Contractual Clauses.
Managing and withdrawing consent
Choose your preferences in the cookie banner when you first visit. You can change them at any time using the Cookie settings link in the footer, which reopens the banner so you can turn a category off again. Withdrawing consent is as straightforward as giving it.
What we do not do
We do not sell your personal data. We do not set analytics or advertising cookies before you have consented to them.
More information
For how we handle personal data more broadly, see our Privacy Notice, or contact us at hello@alethrikolabs.co.uk.