Cookie Policy

Yes, this site uses cookies

Not many, and none of them advertising. This page names each one rather than describing them in categories, because a cookie notice that will not tell you what it sets is not a notice.

What is set, and what it does

`_ga` and `_ga_LRLBNHLF9P` are set by Google Analytics. The first tells Google that two page views came from the same browser; the second holds the state of your current visit. They expire two years after your last visit.

`_clck` and `_clsk` are set by Microsoft Clarity. The first is the identifier Clarity knows this browser by and lasts a year; the second ties the pages of one visit into a single recording, lasts a day, and treats thirty minutes of inactivity as the end of the visit.

`CLID` is also Microsoft’s, and it is the one we cannot do much about. It is not written by anything on this page — Microsoft attaches it to the response when your browser fetches the Clarity tag, before a line of our code has run. It lasts a year, it is marked so that no script on this site can read or delete it, and it identifies your browser to Clarity across every site that uses Clarity, not just ours. We would not have chosen it. It is disclosed here because it is set.

That is the whole list. If it grows, this page grows with it — before the cookie is set, not after.

The ones you don’t get

A stock Clarity install sets five more, and this site does not. On every page load Clarity’s tag loads a one-pixel image from Microsoft that bounces through Bing and back, and that round trip is what sets `MUID` — Microsoft Advertising’s identifier for your browser, written to both clarity.ms and bing.com and good for 390 days — along with `SRM_B`, `MR`, `SM` and `ANONCHK`. None of it is analytics. It is advertising identity, it is switched on by default, and nothing in Clarity’s settings turns it off.

So we blocked it in the site’s content security policy instead, which stops the request at the browser rather than trusting a setting. We checked the consequences before doing it: the recorder itself never mentions Bing, and heatmaps, recordings and everything else work exactly the same without it.

This is the difference between a cookie page that says no advertising cookies and a site that has actually stopped them.

What we don’t do with them

We do not run advertising cookies, we do not sell or share what analytics collects, and we do not use any of it to build a profile of you or follow you around other sites. Advertising storage, ad personalisation and ad user data are refused in the Google tag, and Clarity is told the same thing before it loads.

Where that promise stops is Microsoft, and pretending otherwise would be the easy thing to do. Microsoft’s terms make it an independent controller rather than our processor: what Clarity sends is theirs as well as ours, and their terms permit using it for their own purposes, including profiles for advertising. We refuse it at our end and we can show you where. We cannot bind theirs. If that trade is not one you want to make, the last section is not a formality.

The two things we store outside cookies

A single value in your browser’s session storage, named `vantic-intro`, which records that you have already seen the short opening animation so you are not shown it twice in one visit. It contains no personal information, is never sent to us or to anyone else, and is discarded the moment you close the tab.

Clarity adds one more, `_cltk`, a random label for the tab you have open so a recording does not get confused by two of our pages side by side. It also disappears when the tab closes. Neither tool uses local storage, and neither uses a database in your browser.

How we measure the site

Google Analytics tells us which pages are read, what brought people to them, and what they do next. Vercel Analytics and Vercel Speed Insights sit alongside it for page views and load performance, and both of those remain cookieless and aggregate.

Microsoft Clarity is the one that watches the page rather than the traffic — where people stop, what they click that isn’t clickable, which layouts fight them on a phone. It rebuilds the visit from the page’s own HTML and your clicks and scrolls; it is not a video and nothing is captured from your screen, camera or microphone. What you type is masked before it leaves your browser, and the enquiry form is masked in the markup on top of that. The privacy page sets it out in full.

Bot protection

The enquiry form is protected by Vercel BotID, which distinguishes real people from automated abuse so the form stays open without becoming a spam target. It does not set advertising cookies and is not used to profile visitors.

Turning them off

Every browser can block or clear cookies for a single site, and blocking ours costs you nothing — the site works identically without them. Google publishes a browser add-on that opts you out of Analytics everywhere.

For Clarity the switch that actually works is Global Privacy Control, which Microsoft honours: turn it on in your browser or its privacy extension and Clarity stops. Do Not Track will not help you here — Microsoft says plainly that Clarity ignores it, and we would rather tell you that than let you believe a setting is doing something it isn’t. There is also an industry opt-out at optout.aboutads.info covering Microsoft’s advertising identifiers.

If you would rather we did not measure your visit at all, tell us at hello@vantic.com.au and we will say exactly what we hold.