Cookie Policy
Version 1.4 · Last updated 2 October 2026
This policy explains how companypolicies.ai uses cookies and similar technologies (such as browser local storage), in line with the Privacy and Electronic Communications Regulations 2003 (PECR) and, for EU visitors, the ePrivacy Directive.
Strictly necessary storage (no consent needed)
| Name | Purpose | Duration |
|---|---|---|
cp_consent | Remembers your cookie choice (and which optional tools it covered) | Until cleared |
cp_generator | Saves the company details and logo you enter so you can finish and download after payment | Until cleared |
cp_variant (session storage) | Keeps the same page design (A/B test version) while you browse. No personal data. | Until you close the tab |
cp_variant (cookie + local storage, only with analytics consent) | Remembers which design version you saw so our anonymous A/B test counts stay accurate | 6 months |
cp_ev_* (session storage) | Stops the same anonymous visit being counted twice in our conversion statistics | Until you close the tab |
cp_tailor_*, cp_edits_* | Saves your tailoring answers and document edits after purchase so you can return to them | Until cleared |
cp_paid_* (session storage) | Stops a completed payment being counted twice in our statistics | Until you close the tab |
cp_promo | Remembers a discount code from a link you clicked (for example from your free policy results page) so it can be applied at checkout | 30 days |
cp_wb_sample (session storage) | Keeps your answers and result while you create your free Whistleblowing policy | Until you close the tab |
cp_acct (cookie, httpOnly) | Keeps you signed in to “My policies” after you confirm a one-time code sent to your email | 7 days, or until you sign out |
cp_report_company | Remembers the company name for the Tender Readiness Report you bought | Until cleared |
cp_reveal (session storage) | Shows the “This is your policy” preview only once per visit | Until you close the tab |
cp_acceptances | Local fallback copy of your terms acceptance if our server is unreachable | Until cleared |
Partner referral storage (only with consent)
| Name | Purpose | Duration |
|---|---|---|
cp_ref (local storage) | If you arrive through a partner’s link and have accepted analytics, remembers which partner introduced you so they can be credited. Without consent, the code is only kept for your current page visit. | 60 days |
cp_conv_* (local storage, only with consent) | Stops a completed purchase being reported twice to the analytics or advertising tools listed below | Until cleared |
Stripe sets its own cookies on its checkout pages to process payment and prevent fraud; see Stripe’s cookie policy.
Our own analytics (cookieless)
We use our own first-party analytics to count page views and key actions (for example starting the generator, choosing policies, starting checkout and opening FAQs). It sets no cookies and stores nothing on your device. To count unique visitors, our server combines your IP address and browser user-agent with a random value that changes every day and keeps only the resulting one-way code. The raw IP address is not stored, and the daily value is deleted so codes cannot be linked across days. We also record the approximate country (from our hosting provider’s network), device type, and the referring site or campaign. Because it stores nothing on your device, it runs without consent; the third-party tools below are separate and only run if you accept them.
Third-party analytics and advertising (only with your consent)
The tools below are never loaded, and set no cookies, unless you accept them in our cookie banner. Until then no request is made to Google or Microsoft. You can accept analytics and marketing separately using “Choose”. We use Google Consent Mode (and Microsoft’s equivalent), so these tools receive your choice before they run. If you later withdraw consent, we stop loading them and delete the cookies they set on our domain. Cookies set on the provider’s own domain (marked below) can only be removed in your browser settings.
Cookie names and durations are the typical values each provider publishes and may change; follow “Provider’s details” for the current list. These providers may process data outside the UK — see our Privacy Policy.
Analytics
| Tool and provider | Purpose | Typical cookies and duration |
|---|---|---|
| Google Analytics 4 Google Ireland Limited / Google LLC | Counts visits and shows how visitors use the site (for example which pages lead to the generator), so we can improve it. Google Analytics 4 does not log or store IP addresses. Provider’s details | _ga — 2 years_ga_* — 2 years |
| Microsoft Clarity Microsoft Corporation | Heatmaps and session replays that show how pages are used (clicks, scrolling), so we can fix confusing layouts. Text you type into forms is masked and not recorded. Provider’s details | _clck — 1 year_clsk — 1 dayCLID, MUID (set on Microsoft domains) — up to 13 months |
Marketing (measuring our ads)
| Tool and provider | Purpose | Typical cookies and duration |
|---|---|---|
| Google Ads Google Ireland Limited / Google LLC | Measures whether a visit from one of our Google ads led to a purchase (conversion tracking), and lets us show our ads to people who have visited the site. Provider’s details | _gcl_au — 90 days |
Managing your choice
You can change your choice at any time: