Cookies
Cookie Policy
A cookie is a small file a website stores in your browser; local storage is the same idea with more room. UK law (the Privacy and Electronic Communications Regulations) says we need your consent for any of them that are not strictly necessary for something you asked for. This page lists every one this site uses. It is short because there are few.
1. Strictly necessary
These do not need consent because the site cannot do what you asked without them.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
bp_consent | This site | Remembers whether you accepted or declined optional cookies, so the banner does not ask again. Also mirrored to local storage. | 180 days |
StaticWebAppsAuthCookie | Hosting platform | Keeps you signed in to your account after you sign in. Only set when you sign in. | Session, up to 8 hours |
StaticWebAppsAuthContextCookie | Hosting platform | Carries the sign-in flow between this site and the identity provider. | During sign-in |
broadpaper-demo-template-v2:* (local storage) | The demo | The report you are editing in the demo, one draft per starting point, so you can leave and come back. Never sent to us. | Until you clear it or press Reset |
broadpaper-demo-scenario (local storage) | The demo | Which starting point you last had open. | Until you clear it |
2. Analytics — off unless you turn them on
We use Microsoft Clarity to see which pages help and where people get stuck: page views, clicks, scrolling, and a replay of the session with text and form fields masked. None of it is used for advertising, and we do not sell it.
Nothing in this category is loaded until you turn on Analytics in the cookie banner. Until then the script is never requested and none of these cookies exist. If you decline, or turn analytics off later, we stop the recording and delete the two cookies set on this domain.
| Name | Set by | Purpose | Lasts |
|---|---|---|---|
_clck | This site (Clarity) | A random id for your browser, so repeat visits count as one person rather than several. | 1 year |
_clsk | This site (Clarity) | Joins the pages you view into a single session. | 1 day |
CLID | clarity.ms | Identifies the first time Clarity saw this browser. | 1 year |
MUID, MR, SM, ANONCHK | Microsoft domains | Microsoft’s own identifiers, set by the Clarity script. ANONCHK records whether the identifier may be used for advertising; we set advertising storage to denied, so it is not. | 10 minutes to 1 year |
We can delete the first two, because they are set on this domain. The rest belong to Microsoft and are removed through your browser or Microsoft’s own controls; the link is in Microsoft’s privacy statement.
3. Third parties
With analytics off, this site loads no third-party scripts at all: fonts, images and code are served from this site.
Turning analytics on loads the Clarity script from clarity.ms and sends what it records to Microsoft, who process it as our processor and may transfer it outside the UK under their standard contractual clauses. That is the only third-party script the site has.
The identity providers (GitHub, Microsoft) set their own cookies on their own domains when you sign in through them; those are governed by their policies.
4. Changing your mind
Press Cookie settings in the footer of any page to see or change your choice. You can also delete bp_consent in your browser, and the banner will ask again. Blocking all cookies in your browser will not break the marketing pages; it will stop sign-in working and will make the demo forget your draft between visits.
5. More
How we handle the data these cookies involve is in the privacy policy. Questions to the address in the margin.